https://bugzilla.wikimedia.org/show_bug.cgi?id=24133
Summary: generated LocalSettings.php should not be
world-readable
Product: MediaWiki
Version: 1.16.0beta3
Platform: PC
OS/Version: Linux
Status: NEW
Severity: normal
Priority: Normal
Component: Installation
AssignedTo: [email protected]
ReportedBy: [email protected]
Forwarded from Debian
(http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=550940):
After running the web-based initial configuration of mediawiki
(/var/lib/mediawiki/config/index.php), it created a LocalSettings.php
and instructed me to place it in /etc/mediawiki:
~$ ls -l /etc/mediawiki/LocalSettings.php
-rw-rw-rw- 1 www-data www-data 4536 14 okt 10.54
/etc/mediawiki/LocalSettings.php
This file contains MySQL passwords and should therefore not be world-readable.
I notice that README.Debian suggests changing this, but the file
should not be created world-readable in the first place.
--
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are on the CC list for the bug.
_______________________________________________
Wikibugs-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
