On 2018-10-28 16:43, Reindl Harald wrote:
Am 28.10.18 um 17:34 schrieb mick crane:
On 2018-10-28 15:58, Michael Orlitzky wrote:
On 10/28/2018 04:54 AM, mick crane wrote:
find /usr/share/roundcubemail-1.3.8 -type f -exec chmod 644 {} ;
Chances are, you don't want your database credentials to be world-readable.
what then 640?
surely, and not owned by the webserver, basic security principals
normaly stuff should be owned by root and read-only for the webserver group, folers 750, files 640
If I change all the permissions to 750 for the roundcubemail directories and 640 for the files and all the ownerships to root.root it don't work after restart apache ownerships www-data.www-data it works. probably it is particular files need to be different but I don't know which ones. [sigh]
mick