Commit Graph

5 Commits

Author SHA1 Message Date
Antoine Beaupré d5a4c72e4a Major redesign of the MySQL backend interface to fix a security issue.
See: #318.

As of now, the MySQL configuration used everywhere by AlternC is not
stored in the main configuration file (/etc/alternc/local.sh) but in a
MySQL configuration file in /etc/alternc/my.cnf, which enables us to
call mysql without exposing the password on the commandline.

The changes here are quite invasive but will allow us to factor out
the MySQL configuration better. See #364.

This includes a partial rewrite of the mysql.sh logic, which is now ran
from the postinst script (and not alternc.install) which will allow us
to actually change the MySQL root user properly. See #601.

This commit was tested like this:

 * clean install on etch (working)
 * upgrade from a clean 0.9.7 (working)
2008-04-13 04:35:19 +00:00
Antoine Beaupré 9a4162f508 retirer la fonction dupliquee init_dom_letter, remplaceee par print_domain_letter. utiliser print_user_letter au lieu code custom 2007-09-09 18:35:15 +00:00
Antoine Beaupré 4b68e501bb move functions to a common directory to avoid code duplication 2007-09-09 18:18:19 +00:00
Antoine Beaupré 005d6379c2 Fix a race condition in update_domaines.sh that could allow users to
bypass open_basedir protections when creating domains. Reported by
jerome.

This required changing basedir_prot's behavior so that it creates the
protection even if the symlink doesn't exist, which might create extra
files that are not necessary, but "better be safe than sorry". We
could also fix this in a subsequent release.
2007-01-12 23:03:33 +00:00
Pierre Gilles Mialon 6ca8255f49 AlternC Plugin are now part of AlternC svn repository\n Migration Phase 2 2006-04-26 12:28:53 +00:00