John F. Lewis has uploaded a new change for review.

  https://gerrit.wikimedia.org/r/235384

Change subject: mailman: set new settings to improve security
......................................................................

mailman: set new settings to improve security

Sets new settings introduced at different times between 2.1.14 to 2.1.18 which
improve security of password cookies and automated bounces.

Change-Id: I8a10a2d88b72f9f81566396842cfa27ba151a266
---
M modules/mailman/files/mm_cfg.py
1 file changed, 6 insertions(+), 0 deletions(-)


  git pull ssh://gerrit.wikimedia.org:29418/operations/puppet 
refs/changes/84/235384/1

diff --git a/modules/mailman/files/mm_cfg.py b/modules/mailman/files/mm_cfg.py
index 93c8401..47987da 100644
--- a/modules/mailman/files/mm_cfg.py
+++ b/modules/mailman/files/mm_cfg.py
@@ -126,3 +126,9 @@
 
 # Don't store messages in qfiles/bad
 QRUNNER_SAVE_BAD_MESSAGES = No
+
+# Expire cookies 3600 seconds (1 hour) after last use
+AUTHENTICATION_COOKIE_LIFETIME = 3600
+
+# Don't include full email in automatic bounces
+RESPONSE_INCLUDE_LEVEL = 0

-- 
To view, visit https://gerrit.wikimedia.org/r/235384
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings

Gerrit-MessageType: newchange
Gerrit-Change-Id: I8a10a2d88b72f9f81566396842cfa27ba151a266
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: John F. Lewis <[email protected]>

_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits

Reply via email to