https://bugzilla.wikimedia.org/show_bug.cgi?id=24133
Summary: generated LocalSettings.php should not be world-readable Product: MediaWiki Version: 1.16.0beta3 Platform: PC OS/Version: Linux Status: NEW Severity: normal Priority: Normal Component: Installation AssignedTo: wikibugs-l@lists.wikimedia.org ReportedBy: deb...@jwiltshire.org.uk Forwarded from Debian (http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=550940): After running the web-based initial configuration of mediawiki (/var/lib/mediawiki/config/index.php), it created a LocalSettings.php and instructed me to place it in /etc/mediawiki: ~$ ls -l /etc/mediawiki/LocalSettings.php -rw-rw-rw- 1 www-data www-data 4536 14 okt 10.54 /etc/mediawiki/LocalSettings.php This file contains MySQL passwords and should therefore not be world-readable. I notice that README.Debian suggests changing this, but the file should not be created world-readable in the first place. -- Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the assignee for the bug. You are on the CC list for the bug. _______________________________________________ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l