diff --git a/my.cnf b/my.cnf
index fa8e124..7184b7f 100644
--- a/my.cnf
+++ b/my.cnf
@@ -2,6 +2,8 @@
 datadir=/var/lib/mysql
 socket=/var/lib/mysql/mysql.sock
 user=mysql
+# Disabling symbolic-links is recommended to prevent assorted security risks
+symbolic-links=0
 
 # To allow mysqld to connect to a MySQL Cluster management daemon, uncomment
 # these lines and adjust the connectstring as needed.
diff --git a/mysql.spec b/mysql.spec
index d50c8d0..27b22dc 100644
--- a/mysql.spec
+++ b/mysql.spec
@@ -1,6 +1,6 @@
 Name: mysql
 Version: 5.1.42
-Release: 3%{?dist}
+Release: 4%{?dist}
 Summary: MySQL client programs and shared libraries
 Group: Applications/Databases
 URL: http://www.mysql.com
@@ -652,6 +652,10 @@ fi
 %{_mandir}/man1/mysql_client_test.1*
 
 %changelog
+* Fri Jan  8 2010 Tom Lane <tgl@redhat.com> 5.1.42-4
+- Disable symbolic links by default in /etc/my.cnf
+Resolves: #553652
+
 * Tue Jan  5 2010 Tom Lane <tgl@redhat.com> 5.1.42-3
 - Remove static libraries (.a files) from package, per packaging guidelines
 - Change %%define to %%global, per packaging guidelines