John F. Lewis has uploaded a new change for review. https://gerrit.wikimedia.org/r/235384
Change subject: mailman: set new settings to improve security ...................................................................... mailman: set new settings to improve security Sets new settings introduced at different times between 2.1.14 to 2.1.18 which improve security of password cookies and automated bounces. Change-Id: I8a10a2d88b72f9f81566396842cfa27ba151a266 --- M modules/mailman/files/mm_cfg.py 1 file changed, 6 insertions(+), 0 deletions(-) git pull ssh://gerrit.wikimedia.org:29418/operations/puppet refs/changes/84/235384/1 diff --git a/modules/mailman/files/mm_cfg.py b/modules/mailman/files/mm_cfg.py index 93c8401..47987da 100644 --- a/modules/mailman/files/mm_cfg.py +++ b/modules/mailman/files/mm_cfg.py @@ -126,3 +126,9 @@ # Don't store messages in qfiles/bad QRUNNER_SAVE_BAD_MESSAGES = No + +# Expire cookies 3600 seconds (1 hour) after last use +AUTHENTICATION_COOKIE_LIFETIME = 3600 + +# Don't include full email in automatic bounces +RESPONSE_INCLUDE_LEVEL = 0 -- To view, visit https://gerrit.wikimedia.org/r/235384 To unsubscribe, visit https://gerrit.wikimedia.org/r/settings Gerrit-MessageType: newchange Gerrit-Change-Id: I8a10a2d88b72f9f81566396842cfa27ba151a266 Gerrit-PatchSet: 1 Gerrit-Project: operations/puppet Gerrit-Branch: production Gerrit-Owner: John F. Lewis <[email protected]> _______________________________________________ MediaWiki-commits mailing list [email protected] https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
