Bug 79155

Summary:	rt-3.2.1 webapp installs default mysql user/password w/out warning
Product:	Gentoo Linux	Reporter:	Eric Brown <eric.brown>
Component:	Current packages	Assignee:	Gentoo Web Application Packages Maintainers <web-apps>
Status:	RESOLVED NEEDINFO
Severity:	major
Priority:	High
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---

Description Eric Brown 2005-01-22 16:11:38 UTC

after installing rt-3.2.1 with weball-install, it adds a new mysql user rt_user/rt_pass without giving warning in the script output.  The script should be modofied to warn the user that the password should be changed to prevent attacks on the rt database bt people who know the default password!

Reproducible: Always
Steps to Reproduce:
1.
2.
3.

Comment 1 Renat Lumpau (RETIRED) gentoo-dev

2005-06-12 13:16:12 UTC

I don't believe the ebuild adds users. Please test with rt-3.4.2, and report if
you still have this issue. Please note that your site-specific configs should
not be overwritten, so the db password, etc., won't change.