Comments - MariaDb vs Oracle

7 years ago Jan Steinman

As far as I know, there are no general-purpose file-manipulation commands in MariaDB/MySQL. Which is good, from a security point-of-view.

You'll have to write a user-defined function. Which is bad, from a security point-of-view:

There are (scary) UDFs available that will let you fire off a shell script. But they will run with the permission of the user running mysqld, and could be invoked by any SQL user. This means (for example) that someone with only SELECT permission could run a script that does "rm -rf /usr/local/var/mysql/*"

Here is enough rope to hang yourself:

7 years ago Jan Steinman

You might consider a totally different approach: using a shell script that does the file manipulation you require while running mysql with the data manipulation you require.

You cannot run file manipulation from MySQL, but you <i>can</i> run MySQL from a file manipulation program. That seems the path of least resistance, rather than trying to use a hammer to drive screws.

6 years, 10 months ago Dba Btissam


Thanks a lot for your feedbacks.Another questions please:

-Oracle has the tablespace feature ,does MariaDb has the same feature ? -If yes how MariaDb encrypt a given tablespace ?


Content reproduced on this site is the property of its respective owners, and this content is not reviewed in advance by MariaDB. The views, information and opinions expressed by this content do not necessarily represent those of MariaDB or any other party.