Share your knowledge at the LQ Wiki.
Go Back > Forums > Linux Forums > Linux - Security
User Name
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.


  Search this Thread
Old 10-15-2010, 06:24 AM   #1
LQ Newbie
Registered: Apr 2010
Posts: 26

Rep: Reputation: 0
How secure to grant "reload" privileges to a normal user in MySql


One user in my company wants to run some flush cache queries on a MySql database, it needs "reload" privileges of Administration,

how secure is to give this rights to a normal user ?

Old 10-15-2010, 06:39 AM   #2
LQ Newbie
Registered: Dec 2008
Location: Holland, Michigan USA
Distribution: Kubuntu 8.04
Posts: 9
Blog Entries: 1

Rep: Reputation: 1
I'm not an expert, But it seems to me, That this may give them the ability to use an sql injection exploit,Or some other means of causing problems, And then reload the database, Thus enabling the damage.

Steel fences may be ugly, But they do work.
Or maybe i'm paranoid.
0 members found this post helpful.
Old 10-20-2010, 08:42 AM   #3
Registered: May 2005
Location: Northern VA
Distribution: Slackware, Ubuntu, FreeBSD, OpenBSD, OS X
Posts: 782
Blog Entries: 8

Rep: Reputation: 158Reputation: 158
The reference guide states the following (for FLUSH):

The FLUSH statement clears or reloads various internal caches used by MySQL. To execute FLUSH, you must have the RELOAD privilege.
Looks like you're going to have to give him this privilege, as there's an apparent need. Needs sometimes override security aspects, but it is smart to justify why. It is up to you to see that he justifies his need properly.

Then again, I may be overlooking something...I'm not strong in databases.

Oh, and BTW, this IS MySQL, right?

Last edited by unixfool; 10-20-2010 at 08:50 AM.


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off

Similar Threads
Thread Thread Starter Forum Replies Last Post
Grant Privileges - MySQL Jannyno Linux - General 2 06-23-2012 02:00 AM
[SOLVED] MySQL: Can't GRANT privileges after restoring a database Chili.Willy Linux - Software 2 12-03-2009 09:21 PM
GRANT privileges on multiple databases to one user dipuasks Linux - General 1 01-28-2009 07:57 AM
normal user want to perform "init 6" by using " sudo acbenny Linux - General 3 08-08-2004 07:41 AM
grant user "shutdown -h now" mcshen Linux - Newbie 3 01-11-2004 01:30 PM > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 06:13 AM.

Main Menu
Write for LQ is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration