Quote password to avoid manipulating string

This change quotes the DB_ROOT_PASSWORD variable used in the mysql_wsrep_notify.sh script
to ensure we don't glob or expand potential bash expressions

Signed-off-by: Brendan Shephard <[email protected]>

Author: bshephar

templates/galera/bin/mysql_wsrep_notify.sh

@@ -28,7 +28,7 @@ function log_error() {
 
 function mysql_get_status {
     local name=$1
-    mysql -nNE -uroot -p$DB_ROOT_PASSWORD -e "show status like '${name}';" | tail -1
+    mysql -nNE -uroot -p"${DB_ROOT_PASSWORD}" -e "show status like '${name}';" | tail -1
     if [ $? != 0 ]; then
         log_error "could not get value of mysql variable '${name}' (rc=$?)"
         return 1