diff options
author | Jorge Hernandez <jh1730@att.com> | 2018-02-27 15:14:14 -0600 |
---|---|---|
committer | Jorge Hernandez <jh1730@att.com> | 2018-02-27 15:14:14 -0600 |
commit | 68d2d90042457360545d36874d95d561b1361a97 (patch) | |
tree | 406e3a0b37a058756097ceb1dc2d0cad467adf91 /packages/base | |
parent | 47c1630d48e40e1fbc051fa6eae251ffbe1d4945 (diff) |
remove mariadb superuser sql statements
PE installation as part of data upgrade invokes
"set global" statements that are typically used
by priviledged accounts as the "root" mariadb user.
As part of the effort to clean up the mariadb docker install,
only permissions to a regular mariadb user (policy_user by default)
are given in 3 databases: onap_sdk, log, and support.
This account cannot do changes outside those.
In any case the usage of the global timeouts is questionable.
We should keep an eye if there's any potential bad side effect,
and correct it if it doesn't. It's preferable to keep
"policy_user" with a restricted set of privileges, instead
of being a superuser (otherwise can plainly user the root account).
Change-Id: I17b1a6a2cb62a319464e1db4b3aafbc1dbf20d78
Issue-ID: POLICY-650
Signed-off-by: Jorge Hernandez <jh1730@att.com>
Diffstat (limited to 'packages/base')
-rwxr-xr-x | packages/base/src/files/install/mysql/data/161000_upgrade_script.sql | 5 |
1 files changed, 1 insertions, 4 deletions
diff --git a/packages/base/src/files/install/mysql/data/161000_upgrade_script.sql b/packages/base/src/files/install/mysql/data/161000_upgrade_script.sql index 4c64c6420..fe9aec912 100755 --- a/packages/base/src/files/install/mysql/data/161000_upgrade_script.sql +++ b/packages/base/src/files/install/mysql/data/161000_upgrade_script.sql @@ -48,9 +48,6 @@ set foreign_key_checks=0; -- Increasing the Database variable timeouts -- -set global wait_timeout=2147483; -set global interactive_timeout=2147483; - set wait_timeout=2147483; set interactive_timeout=2147483; @@ -6364,4 +6361,4 @@ INSERT INTO `risktype` VALUES (1,'demo','2016-12-29 20:20:48','demo','SampleRisk insert into sequence (seq_name, seq_count) values ('SEQ_GEN', 3050); set foreign_key_checks=1; -commit;
\ No newline at end of file +commit; |