Mariadb114, default socket permissions

Hello everybody,

I'm currently building my server, and I'm currently working on mariadb.
I installed mariadb114-server, and set it up to listen on 127.0.0.1 and a socket (/var/run/mysql/mysql.sock).

The question I have is : is it normal that the default permissions for /var/run/mysql/mysql.sock are so permissive ?
Code:
root@srvjail:~ # ls -l /var/run/mysql/
total 5
srwxrwxrwx  1 mysql mysql 0 Apr 17 22:26 mysql.sock=
-rw-rw----  1 mysql mysql 6 Apr 17 22:26 mysqld.pid
How to change it to rw-rw---- ? I can't figure out.

This is my server.cnf
Code:
root@srvjail:/usr/local/etc/mysql/conf.d # cat server.cnf
# Options specific to server applications, see
# https://mariadb.com/kb/en/configuring-mariadb-with-option-files/#server-option-groups

# Options specific to all server programs
[server]

# Options specific to MariaDB server programs
[server-mariadb]

#
# Options for specific server tools
#

[mysqld]
user                            = mysql
port                            = 3306 # inherited from /usr/local/etc/mysql/my.cnf
socket                          = /var/run/mysql/mysql.sock # inherited from /usr/local/etc/mysql/my.cnf
bind-address                    = 127.0.0.1
basedir                         = /usr/local
# datadir                       = /var/db/mysql # set with --db_dir from rc-script
net_retry_count                 = 16384
log_error                       = /var/log/mysql/mysqld.err
# [mysqld] configuration for ZFS
# From https://www.percona.com/resources/technical-presentations/zfs-mysql-percona-technical-webinar
# Create separate datasets for data and logs, eg
# zroot/mysql      compression=on recordsize=128k atime=off
# zroot/mysql/data recordsize=16k
# zroot/mysql/logs
# datadir                       = /var/db/mysql/data
# innodb_log_group_home_dir     = /var/db/mysql/log
# audit_log_file                = /var/db/mysql/log/audit.log
# general_log_file              = /var/db/mysql/log/general.log
# log_bin                       = /var/db/mysql/log/mysql-bin
# relay_log                     = /var/db/mysql/log/relay-log
# slow_query_log_file           = /var/db/mysql/log/slow.log
# innodb_doublewrite            = 0
# innodb_flush_method           = O_DSYNC

# Options read by `mariadb-safe` (and `mysql_safe`)
[mariadb-safe]

# Options read my `mariabackup`
[mariabackup]

# Options read by mariadb-upgrade (and `mysql_upgrade`)
[mariadb-upgrade]

# Specific options read by the mariabackup SST method
[sst]

Many thanks :)
 
Back
Top