mysql_setpermission depracated
mysql_setpermission is a Perl script that automates setting of permissions on MariaDB TABLES The script is bundled into releases of MySQL and MariaDB
mysql_setpermission has (by default) Unix permissions rwxr-xr-x root root So can be ran by anyone with an account on the Linux box that MariaDB is installed
Is that normal? - to give any user the authority to run mysql_setpermission with root permissions?
In other words, an insider threat actor with little knowledge of the DATBASE TABLES could manipulate access to achieve a DoS
What mitigation - maybe changing privileges (to 744) or alternative action could be taken; and not invoke mysql_setpermission?
Answer Answered by Sergei Golubchik in this comment.
There is no magic in mysql_setpermission, it is a normal MariaDB client tool, it needs proper credentials to connect to the database. Anyone can run it, but this anyone would need to specify a username and a password of a sufficiently privileged dabatase account.
