Skip to content

Do database backup under unprivileged user #425

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
php-coder opened this issue Jul 29, 2016 · 0 comments
Open

Do database backup under unprivileged user #425

php-coder opened this issue Jul 29, 2016 · 0 comments

Comments

@php-coder
Copy link
Owner

php-coder commented Jul 29, 2016

We can create special user backup for doing backups. He will have limited amount of permissions and also we can use its password in ~/home/mystamps/.my.cnf file.

The following steps should be done:

  • backup user in MySQL should be created (with limited access: only from localhost and it should have permissions that allows to doing backup only)
  • /data/mystamps/.my.cnf file should be updated on the server with new login/password
  • /etc/cron.d/mystamps should be modified to use backup user
  • mystamps-backup Ansible role should be updated to reflect this changes
  • instruction should be updated

Tech debt for: #116

Quote from mysqldump documentation:

mysqldump requires at least the SELECT privilege for dumped tables, SHOW VIEW for dumped views, TRIGGER for dumped triggers, and LOCK TABLES if the --single-transaction option is not used. Certain options might require other privileges as noted in the option descriptions.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant