7 messages in com.mysql.lists.clusterRe: securing ndb_mgmd
FromSent OnAttachments
Len Kranendonk27 Jan 2005 01:28 
Alex Davies27 Jan 2005 01:31 
Len Kranendonk27 Jan 2005 02:00 
kla...@opperen.dk27 Jan 2005 04:32 
Stewart Smith27 Jan 2005 17:16 
Tomas Ulin08 Feb 2005 01:48 
Len Kranendonk08 Feb 2005 04:07 
Subject:Re: securing ndb_mgmd
From:Len Kranendonk (le@primaat.com)
Date:01/27/2005 02:00:14 AM
List:com.mysql.lists.cluster

chown root:root ndb_mgm chmod ndb_mgm 700

Should make access only to root.

Alex

That does not fix the problem. A malicious user can run his own version of ndb_mgm.

Also, it seems that there is no check on the source IP address of the ndb_mgm client. I've just installed the ndb_mgm client on a box outside the cluster, and I can connect to the management server and bring down the cluster as a regular user.

Len