From 07abbcbbe129a4c44c58fa2496b0921e52a759c2 Mon Sep 17 00:00:00 2001 From: Christian Hesse Date: Tue, 29 Jan 2019 23:12:01 +0100 Subject: enable PrivateTmp for a little bit more security --- support-files/mariadb.service.in | 2 +- support-files/mariadb@.service.in | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/support-files/mariadb.service.in b/support-files/mariadb.service.in index 8d43b6db428..a96fbcc9d2c 100644 --- a/support-files/mariadb.service.in +++ b/support-files/mariadb.service.in @@ -117,7 +117,7 @@ UMask=007 # If you don't use the /tmp directory for SELECT ... OUTFILE and # LOAD DATA INFILE you can enable PrivateTmp=true for a little more security. -PrivateTmp=false +PrivateTmp=true ## ## Options previously available to be set via [mysqld_safe] diff --git a/support-files/mariadb@.service.in b/support-files/mariadb@.service.in index a2f5cff0828..30631a8738a 100644 --- a/support-files/mariadb@.service.in +++ b/support-files/mariadb@.service.in @@ -138,7 +138,7 @@ UMask=007 # If you don't use the /tmp directory for SELECT ... OUTFILE and # LOAD DATA INFILE you can enable PrivateTmp=true for a little more security. -PrivateTmp=false +PrivateTmp=true ## ## Options previously available to be set via [mysqld_safe] From 0e4a158086b765aa3a12b84646aefb9b192443f7 Mon Sep 17 00:00:00 2001 From: Christian Hesse Date: Tue, 29 Jan 2019 23:12:54 +0100 Subject: force preloading jemalloc for memory management --- support-files/mariadb.service.in | 1 + support-files/mariadb@.service.in | 1 + 2 files changed, 2 insertions(+) diff --git a/support-files/mariadb.service.in b/support-files/mariadb.service.in index a96fbcc9d2c..6bb5d4227b9 100644 --- a/support-files/mariadb.service.in +++ b/support-files/mariadb.service.in @@ -140,6 +140,7 @@ LimitNOFILE=16364 # Library substitutions. previously [mysqld_safe] malloc-lib with explicit paths # (in LD_LIBRARY_PATH) and library name (in LD_PRELOAD). # Environment="LD_LIBRARY_PATH=/path1 /path2" "LD_PRELOAD= +Environment="LD_PRELOAD=/usr/lib/libjemalloc.so" # Flush caches. previously [mysqld_safe] flush-caches=1 # ExecStartPre=sync diff --git a/support-files/mariadb@.service.in b/support-files/mariadb@.service.in index 83d75f80b87..d1d24d685f9 100644 --- a/support-files/mariadb@.service.in +++ b/support-files/mariadb@.service.in @@ -161,6 +161,7 @@ LimitNOFILE=16364 # Library substitutions. previously [mysqld_safe] malloc-lib with explicit paths # (in LD_LIBRARY_PATH) and library name (in LD_PRELOAD). # Environment="LD_LIBRARY_PATH=/path1 /path2" "LD_PRELOAD= +Environment="LD_PRELOAD=/usr/lib/libjemalloc.so" # Flush caches. previously [mysqld_safe] flush-caches=1 # ExecStartPre=sync From 820b47c1e70d36f1272cca3ddbdf4bbd2dd62bde Mon Sep 17 00:00:00 2001 From: Christian Hesse Date: Wed, 30 Jan 2019 00:46:47 +0100 Subject: remove aliases from systemd unit files --- support-files/mariadb.service.in | 2 -- support-files/mariadb@.service.in | 2 -- 2 files changed, 4 deletions(-) diff --git a/support-files/mariadb.service.in b/support-files/mariadb.service.in index 8d43b6db428..d7fa6bf5b14 100644 --- a/support-files/mariadb.service.in +++ b/support-files/mariadb.service.in @@ -20,8 +20,6 @@ After=network.target [Install] WantedBy=multi-user.target -Alias=mysql.service -Alias=mysqld.service [Service]