How can I have MySQL write outfiles as a different user?

Question

I'm working with a MySQL query that writes into an outfile. I run this query once every day or two and so I want to be able to remove the outfile without having to resort to su or sudo. The only way I can think of making that happen is to have the outfile written as owned by someone other than the mysql user. Is this possible?

Edit: I am not redirecting output to a file, I am using the INTO OUTFILE part of a select query to output to a file.

If it helps:

mysql --version
mysql  Ver 14.12 Distrib 5.0.32, for pc-linux-gnu (x86_64) using readline 5.2

Answer 1

If you have another user run the query from cron, it will create the file as that user.

Answer 2

The output file is created by the mysqld process, not by your client process. Therefore the output file must be owned by the uid and gid of the mysqld process.

You can avoid having to sudo to access the file if you access it from a process under a uid or gid that can access the file. In other words, if mysqld creates files owned by uid and gid "mysql"/"mysql", then add your own account to group "mysql". Then you should be able to access the file, provided the file's permission mode includes group access.

Edit:

You are deleting a file in /tmp, with a directory permission mode of rwxrwxrwt. The sticky bit ('t') means you can remove files only if your uid is the same as the owner of the file, regardless of permissions on the file or the directory.

If you save your output file in another directory that doesn't have the sticky bit set, you should be able to remove the file normally.

Read this excerpt from the man page for sticky(8):

STICKY DIRECTORIES

A directory whose `sticky bit' is set becomes an append-only directory, or, more accurately, a directory in which the deletion of files is restricted. A file in a sticky directory may only be removed or renamed by a user if the user has write permission for the directory and the user is the owner of the file, the owner of the directory, or the super-user. This feature is usefully applied to directories such as /tmp which must be publicly writable but should deny users the license to arbitrarily delete or rename each others' files.

Answer 3

Not using the "SELECT...INTO OUTFILE" syntax, no.

You need to run the query (ie client) as another user, and redirect the output. For example, edit your crontab to run the following command whenever you want:

mysql db_schema -e 'SELECT col,... FROM table' > /tmp/outfile.txt

That will create /tmp/outfile.txt as the user who's crontab you've added the command to.

Answer 4

I just do

sudo gedit /etc/apparmor.d/usr.sbin.mysqld

and add

 /var/www/codeigniter/assets/download/* w,

and

sudo service mysql restart

And that's it i can do easily SELECT INTO OUTFILE any filename