plain text passwords are good reason for the file to be protected

refs 13b800e, 978cdac2
doc http://dev.mysql.com/doc/refman/5.7/en/option-files.html

diff --git a/mysql.spec b/mysql.spec
index 7c494fe3d617fefb5914d9a8666dcb9f95655c95..1d9c108eb95ad09faf469bbe63364801069ba645 100644 (file)
--- a/mysql.spec
+++ b/mysql.spec
@@ -1032,7 +1032,7 @@ done
 
 %files client
 %defattr(644,root,root,755)
-%attr(644,root,root) %config(noreplace,missingok) %verify(not md5 mtime size) /etc/skel/.my.cnf
+%attr(600,root,root) %config(noreplace,missingok) %verify(not md5 mtime size) /etc/skel/.my.cnf
 %attr(755,root,root) %{_bindir}/mysql
 %attr(755,root,root) %{_bindir}/mysqladmin
 %attr(755,root,root) %{_bindir}/mysqlbinlog