Re: [RCU] Updating RC

2022-12-06 Thread Gerardo Contreras
Root should NOT own any directory that is publicly accessed, such as web content. Should there be a breach, then the visitor will have root access to the whole system. It is better if the directory is owned by the web server, and that depends on your platform. Have you checked other

Re: [RCU] Updating RC

2022-12-06 Thread list
I am getting, what I think a permission error. What should the roundcube permissions be set to? Right now, they are set as root, which should work, right? Or, should I set them to have the same permissions as the apache "user"? Right now I am getting this error.. Symbolic link not allowed or

Re: [RCU] Updating RC

2022-12-06 Thread Bernardo Reino
On Tue, 6 Dec 2022, Mike Burger wrote: I suggest chown'ing the entire Roundcube directory structure to be owned by your web server user (apache?), since your web server doesn't (or, at least, shouldn't be set to) run as root. The web user (www-data) should NOT have write-access to

Re: [RCU] Updating RC

2022-12-06 Thread Mike Burger
I suggest chown'ing the entire Roundcube directory structure to be owned by your web server user (apache?), since your web server doesn't (or, at least, shouldn't be set to) run as root. On 2022-12-06 04:39, Thomas Anderson wrote: thanks Mr. Reino, It seemed to work, but I have been

Re: [RCU] Updating RC

2022-12-06 Thread Thomas Anderson
thanks Mr. Reino, It seemed to work, but I have been unable to get it up and running after a couple of days of meddling with it. I am getting, what I think a permission error. What should the roundcube permissions be set to? Right now, they are set as root, which should work, right? Or,

Re: [RCU] Updating RC

2022-12-06 Thread Roas Solutions
I would not like to receive these emails anymoe anyone a suggestion how i can fix this? On Tue, 6 Dec 2022, 16:00 Mike Burger, wrote: > I suggest chown'ing the entire Roundcube directory structure to be owned > by your web server user (apache?), since your web server doesn't (or, at > least,

Re: [RCU] Updating RC

2022-12-06 Thread list
Root should NOT own any directory that is publicly accessed, such as web content. I don't know if this is worded wrong, or maybe English isn't your primary language, but this is the worst advice as-worded. You shouldn't run services as root, but yes, files and directories *should* be owned

Re: [RCU] Updating RC

2022-12-06 Thread Benny Pedersen
Gerardo Contreras skrev den 2022-12-06 16:27: Root should NOT own any directory that is publicly accessed, such as web content. Should there be a breach, then the visitor will have root access to the whole system. It is better if the directory is owned by the web server, and that depends on your

Re: [RCU] Updating RC

2022-12-06 Thread Benny Pedersen
Roas Solutions skrev den 2022-12-06 23:10: I would not like to receive these emails anymoe anyone a suggestion how i can fix this? http://lists.roundcube.net/mailman/listinfo/users type your email address into unsubscribe, press the button, and confirm in mail received, done

Re: [RCU] Updating RC

2022-12-06 Thread Benny Pedersen
Mike Burger skrev den 2022-12-06 15:41: I suggest chown'ing the entire Roundcube directory structure to be owned by your web server user (apache?), since your web server doesn't (or, at least, shouldn't be set to) run as root. bad advise don't doit, if you belive "chown -R wepserver-user /"