On 2018-10-28 16:43, Reindl Harald wrote:
Am 28.10.18 um 17:34 schrieb mick crane:
On 2018-10-28 15:58, Michael Orlitzky wrote:
On 10/28/2018 04:54 AM, mick crane wrote:
find /usr/share/roundcubemail-1.3.8 -type f -exec chmod 644 {} ;
Chances are, you don't want your database credentials to be world-readable.
what then 640?
surely, and not owned by the webserver, basic security principals
normaly stuff should be owned by root and read-only for the webserver group, folers 750, files 640
If I change all the permissions to 750 for the roundcubemail directories and 640 for the files and all the ownerships to root.root it don't work after restart apache ownerships www-data.www-data it works. probably it is particular files need to be different but I don't know which ones. [sigh]
mick
On 10/30/2018 02:15 AM, mick crane wrote:
normaly stuff should be owned by root and read-only for the webserver group, folers 750, files 640
If I change all the permissions to 750 for the roundcubemail directories and 640 for the files
The owner should be root but the group "www-data" (in this case) for the permission modes 750 or 640 to allow read access to the web server.
On 2018-10-30 13:31, Michael Orlitzky wrote:
On 10/30/2018 02:15 AM, mick crane wrote:
normaly stuff should be owned by root and read-only for the webserver group, folers 750, files 640
If I change all the permissions to 750 for the roundcubemail directories and 640 for the files
The owner should be root but the group "www-data" (in this case) for the permission modes 750 or 640 to allow read access to the web server. _______________________________________________
cheers
-
Michael Orlitzky -
mick crane