[RCU] update

mick crane mick.crane at gmail.com
Tue Oct 30 07:15:37 CET 2018


On 2018-10-28 16:43, Reindl Harald wrote:
> Am 28.10.18 um 17:34 schrieb mick crane:
>> On 2018-10-28 15:58, Michael Orlitzky wrote:
>>> On 10/28/2018 04:54 AM, mick crane wrote:
>>>> find /usr/share/roundcubemail-1.3.8 -type f -exec chmod 644 {} \;
>>> 
>>> Chances are, you don't want your database credentials to be
>>> world-readable.
>> 
>> what then 640?
> 
> surely, and not owned by the webserver, basic security principals
> 
> normaly stuff should be owned by root and read-only for the webserver
> group, folers 750, files 640

If I change all the permissions to 750 for the roundcubemail directories 
and 640 for the files
and all the ownerships to root.root it don't work after restart apache
ownerships www-data.www-data it works.
probably it is particular files need to be different but I don't know 
which ones.
[sigh]

mick


-- 
Key ID    4BFEBB31


More information about the users mailing list