diff --git a/slapos/recipe/erp5/src/slapos/recipe/erp5/mysql.py b/slapos/recipe/erp5/src/slapos/recipe/erp5/mysql.py
index 0ccc3491535916257f8da7563e6391cb6b05946a..e2036076a611cd308755a93f77c763ba91e3fb73 100644
--- a/slapos/recipe/erp5/src/slapos/recipe/erp5/mysql.py
+++ b/slapos/recipe/erp5/src/slapos/recipe/erp5/mysql.py
@@ -14,6 +14,7 @@ def runMysql(args):
   if not os.path.isdir(os.path.join(conf['data_directory'], 'mysql')):
     while True:
       # XXX: Protect with proper root password
+      # XXX: Follow http://dev.mysql.com/doc/refman/5.0/en/default-privileges.html
       popen = subprocess.Popen([conf['mysql_install_binary'],
         '--skip-name-resolve', '--no-defaults', '--datadir=%s' %
         conf['data_directory']],