[Pkg-roundcube-maintainers] Bug#608976: roundcube-core: /etc/roundcube/debian-db.php is owned by (and writable by) www-data

Vincent Bernat bernat at debian.org
Wed Jan 5 14:44:28 UTC 2011


OoO  En cette  fin de  nuit blanche  du mercredi  05 janvier  2011, vers
05:06, Daniel Kahn Gillmor <dkg at fifthhorseman.net> disait :

> What's not reasonable is www-data owning and having write access to
> debian-db.php.  Why should the web server to be able to
> overwrite/trash its own config?

Right.
-- 
Use the fundamental control flow constructs.
            - The Elements of Programming Style (Kernighan & Plauger)
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 197 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-roundcube-maintainers/attachments/20110105/fdce286f/attachment.pgp>


More information about the Pkg-roundcube-maintainers mailing list