PKGBUILDs/extra/mariadb/0001-arch-specific.patch

95 lines
3.8 KiB
Diff
Raw Normal View History

2020-05-14 14:06:22 +00:00
From bf66e7d610de0d7d3651742342c01ed9ff93f363 Mon Sep 17 00:00:00 2001
2019-02-24 21:19:41 +00:00
From: Christian Hesse <mail@eworm.de>
2020-05-14 14:06:22 +00:00
Date: Wed, 19 Feb 2020 13:10:17 +0100
Subject: [PATCH 1/3] enable PrivateTmp for a little bit more security
2019-02-24 21:19:41 +00:00
---
support-files/mariadb.service.in | 2 +-
support-files/mariadb@.service.in | 2 +-
2 files changed, 2 insertions(+), 2 deletions(-)
diff --git a/support-files/mariadb.service.in b/support-files/mariadb.service.in
2020-05-14 14:06:22 +00:00
index e7665ed1219..a1fe69d61c4 100644
2019-02-24 21:19:41 +00:00
--- a/support-files/mariadb.service.in
+++ b/support-files/mariadb.service.in
2020-05-14 14:06:22 +00:00
@@ -129,7 +129,7 @@ UMask=007
2019-02-24 21:19:41 +00:00
# If you don't use the /tmp directory for SELECT ... OUTFILE and
# LOAD DATA INFILE you can enable PrivateTmp=true for a little more security.
-PrivateTmp=false
+PrivateTmp=true
2020-05-14 14:06:22 +00:00
# Set an explicit Start and Stop timeout of 900 seconds (15 minutes!)
# this is the same value as used in SysV init scripts in the past
2019-02-24 21:19:41 +00:00
diff --git a/support-files/mariadb@.service.in b/support-files/mariadb@.service.in
2020-05-14 14:06:22 +00:00
index ffefc2f22d8..f8b0b8aad8d 100644
2019-02-24 21:19:41 +00:00
--- a/support-files/mariadb@.service.in
+++ b/support-files/mariadb@.service.in
2020-05-14 14:06:22 +00:00
@@ -241,7 +241,7 @@ UMask=007
2019-02-24 21:19:41 +00:00
2019-03-01 19:30:56 +00:00
# If you don't use the /tmp directory for SELECT ... OUTFILE and
# LOAD DATA INFILE you can enable PrivateTmp=true for a little more security.
-PrivateTmp=false
+PrivateTmp=true
2019-02-24 21:19:41 +00:00
2020-05-14 14:06:22 +00:00
# Set an explicit Start and Stop timeout of 900 seconds (15 minutes!)
# this is the same value as used in SysV init scripts in the past
From 00aab78891a19a14a92039fcc6a73e391a3bb471 Mon Sep 17 00:00:00 2001
2019-02-24 21:19:41 +00:00
From: Christian Hesse <mail@eworm.de>
2020-05-14 14:06:22 +00:00
Date: Wed, 19 Feb 2020 13:10:46 +0100
Subject: [PATCH 2/3] force preloading jemalloc for memory management
2019-02-24 21:19:41 +00:00
---
support-files/mariadb.service.in | 1 +
support-files/mariadb@.service.in | 1 +
2 files changed, 2 insertions(+)
diff --git a/support-files/mariadb.service.in b/support-files/mariadb.service.in
2020-05-14 14:06:22 +00:00
index a1fe69d61c4..9a2941ae917 100644
2019-02-24 21:19:41 +00:00
--- a/support-files/mariadb.service.in
+++ b/support-files/mariadb.service.in
2020-05-14 14:06:22 +00:00
@@ -159,6 +159,7 @@ LimitNOFILE=16364
2019-02-24 21:19:41 +00:00
# Library substitutions. previously [mysqld_safe] malloc-lib with explicit paths
# (in LD_LIBRARY_PATH) and library name (in LD_PRELOAD).
# Environment="LD_LIBRARY_PATH=/path1 /path2" "LD_PRELOAD=
+Environment="LD_PRELOAD=/usr/lib/libjemalloc.so"
# Flush caches. previously [mysqld_safe] flush-caches=1
# ExecStartPre=sync
diff --git a/support-files/mariadb@.service.in b/support-files/mariadb@.service.in
2020-05-14 14:06:22 +00:00
index f8b0b8aad8d..3309127330c 100644
2019-02-24 21:19:41 +00:00
--- a/support-files/mariadb@.service.in
+++ b/support-files/mariadb@.service.in
2020-05-14 14:06:22 +00:00
@@ -282,6 +282,7 @@ LimitNOFILE=16364
2019-02-24 21:19:41 +00:00
# Library substitutions. previously [mysqld_safe] malloc-lib with explicit paths
# (in LD_LIBRARY_PATH) and library name (in LD_PRELOAD).
# Environment="LD_LIBRARY_PATH=/path1 /path2" "LD_PRELOAD=
+Environment="LD_PRELOAD=/usr/lib/libjemalloc.so"
# Flush caches. previously [mysqld_safe] flush-caches=1
# ExecStartPre=sync
2020-05-14 14:06:22 +00:00
From a78ff18c83a5eb2556d4f3716f13786dcd8395d2 Mon Sep 17 00:00:00 2001
2019-02-24 21:19:41 +00:00
From: Christian Hesse <mail@eworm.de>
2020-05-14 14:06:22 +00:00
Date: Wed, 19 Feb 2020 13:11:31 +0100
Subject: [PATCH 3/3] Make systemd-tmpfiles create MYSQL_DATADIR
This is a no-op if the directory exists, but makes sure it is created by
systemd-tmpfiles with proper permissions otherwise.
This solves packaging issues when the user MYSQLD_USER is created by
systemd-sysusers and uid is not known in advance.
2020-08-10 17:38:59 +00:00
Also this now sets the No_COW attribute.
2019-02-24 21:19:41 +00:00
---
2020-08-10 17:38:59 +00:00
support-files/tmpfiles.conf.in | 2 +
1 file changed, 2 insertion(+)
2019-02-24 21:19:41 +00:00
2020-05-14 14:06:22 +00:00
diff --git a/support-files/tmpfiles.conf.in b/support-files/tmpfiles.conf.in
index 03d66abc0c7..3c89cb258c9 100644
--- a/support-files/tmpfiles.conf.in
+++ b/support-files/tmpfiles.conf.in
2020-08-10 17:38:59 +00:00
@@ -1 +1,3 @@
2020-05-14 14:06:22 +00:00
d @MYSQL_UNIX_DIR@ 0755 @MYSQLD_USER@ @MYSQLD_USER@ -
+d @MYSQL_DATADIR@ 0700 @MYSQLD_USER@ @MYSQLD_USER@ -
2020-08-10 17:38:59 +00:00
+h @MYSQL_DATADIR@ - - - - +C