Tim writes: > I have a problem with the permissions on configuration files modified by > the BackupPC GUI. The files are given 644 permissions, and owned by > backuppc:apache. > > This is a problem. With 644 permissions, my rsyncd passwords are now > world-readable. That is a deal-killer. Also, from my tests it does not > seem that apache needs to have group ownership. After all, the CGI script > is running setuid as backuppc, right?
It's usually a higher-level directory that protects these files from access. Can you check the parent directories? In any case, changing the modes to 640 sounds like a good idea. Craig ------------------------------------------------------------------------- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys - and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV _______________________________________________ BackupPC-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/backuppc-users http://backuppc.sourceforge.net/
