тут вот что еще непонятное оказалось
http://dev.mysql.com/doc/refman/5.0/en/select.html
Цитата:
Any file created by INTO OUTFILE or INTO DUMPFILE is writable by all users on the server host. The reason for this is that the MySQL server cannot create a file that is owned by anyone other than the user under whose account it is running. (You should never run mysqld as root for this and other reasons.) The file thus must be world-writable so that you can manipulate its contents.
это с 3 версии mysql уже так.
потом ssh:
http://www.openssh.com/cgi-bin/cvsweb/src/usr.bin/ssh/auth.c?rev=1.28
Цитата:
Wed Oct 3 10:01:20 2001 UTC (7 years, 5 months ago) by markus
...
/* check the open file to avoid races */
if (fstat(fileno(f), &st) < 0 ||
(st.st_uid != 0 && st.st_uid != uid) ||
(st.st_mode & 022) != 0) {
snprintf(err, errlen, "bad ownership or modes for file %s",
buf);
return -1;
}
это с 2001 года минимум
тоесть mysql создает с маской 0666 файл а ssh ну по моим тестам не позволяет иметь права на запись ни group ни other.
и в результате:
/var/log/secure
Цитата:
Authentication refused: bad ownership or modes for file /var/lib/mysql/.ssh/authorized_keys