On 2018-10-28 16:43, Reindl Harald wrote:
Am 28.10.18 um 17:34 schrieb mick crane:
On 2018-10-28 15:58, Michael Orlitzky wrote:
On 10/28/2018 04:54 AM, mick crane wrote:
find /usr/share/roundcubemail-1.3.8 -type f -exec chmod 644 {} \;

Chances are, you don't want your database credentials to be
world-readable.

what then 640?

surely, and not owned by the webserver, basic security principals

normaly stuff should be owned by root and read-only for the webserver
group, folers 750, files 640

If I change all the permissions to 750 for the roundcubemail directories and 640 for the files
and all the ownerships to root.root it don't work after restart apache
ownerships www-data.www-data it works.
probably it is particular files need to be different but I don't know which ones.
[sigh]

mick


--
Key ID    4BFEBB31
_______________________________________________
Roundcube Users mailing list
[email protected]
http://lists.roundcube.net/mailman/listinfo/users

Reply via email to