On 2018-10-28 16:43, Reindl Harald wrote:
> Am 28.10.18 um 17:34 schrieb mick crane:
>> On 2018-10-28 15:58, Michael Orlitzky wrote:
>>> On 10/28/2018 04:54 AM, mick crane wrote:
>>>> find /usr/share/roundcubemail-1.3.8 -type f -exec chmod 644 {} \;
>>>
>>> Chances are, you don't want your database credentials to be
>>> world-readable.
>>
>> what then 640?
>
> surely, and not owned by the webserver, basic security principals
>
> normaly stuff should be owned by root and read-only for the webserver
> group, folers 750, files 640
If I change all the permissions to 750 for the roundcubemail directories
and 640 for the files
and all the ownerships to root.root it don't work after restart apache
ownerships www-data.www-data it works.
probably it is particular files need to be different but I don't know
which ones.
[sigh]
mick
--
Key ID 4BFEBB31