VulnMart DBMS package 4.3.0 validation
Build date: 2026-08-04

Implemented requirements
- install.sh contains no Rocky Linux ID, VERSION_ID or /etc/os-release validation.
- MariaDB is fixed to 0.0.0.0:3306 and database name vulnmart.
- install.sh prompts only for application DB username and password.
- The account is created as 'user'@'%' with ALL ON vulnmart.*.
- install.sh performs no WAS DNS lookup, TCP connection or HTTP request.
- Schema and seed are applied only through the local MariaDB Unix socket.
- vulnmart-db-account can create/update another wildcard application account.
- Password hashing is generated locally through MariaDB using a base64-safe SQL
  expression; ordinary shell, SQL and PHP metacharacters are accepted.

Build-host checks
- Bash syntax: PASS
- Account SQL generation with a mocked MariaDB client: PASS
- Special-character password transport to the hash query: PASS
- Static fixed-port/database/account/grant checks: PASS
- Static absence check for version validation and remote tests: PASS

Limitation
- The build host is not a fresh Rocky Linux 9.7 VM and has no active MariaDB
  service. The actual dnf/systemd/SELinux/firewalld installation path is therefore
  validated by script inspection and local shell tests, not a live DBMS install.
