Преглед изворни кода

Fix permissions issue ( security )

Same issue happen in debian, in my centos 6 installs always get /etc/roundcubemail/config.inc.php whit 644 whit roundcube password exposed.

In centos bad user:group is asigned so also fixed

This will be fixed in general update in current installed vestacp servers.
Maksim Usmanov | Maks пре 9 година
родитељ
комит
dfdaf8d80e
1 измењених фајлова са 2 додато и 0 уклоњено
  1. 2 0
      install/vst-install-rhel.sh

+ 2 - 0
install/vst-install-rhel.sh

@@ -1171,6 +1171,8 @@ if [ "$exim" = 'yes' ] && [ "$mysql" = 'yes' ]; then
     mysql -e "CREATE DATABASE roundcube"
     mysql -e "GRANT ALL ON roundcube.* TO roundcube@localhost IDENTIFIED BY '$r'"
     sed -i "s/%password%/$r/g" /etc/roundcubemail/config.inc.php
+    chmod 640 /etc/roundcubemail/config.inc.php
+    chown root:apache /etc/roundcubemail/config.inc.php
     if [ -e "/usr/share/roundcubemail/SQL/mysql.initial.sql" ]; then
         mysql roundcube < /usr/share/roundcubemail/SQL/mysql.initial.sql
     else