Bug#304615: asterisk-web-vmail: vmail.cgi can't access voicemail.conf by default

[Kilian Krause]

--=-vXbRhwDS1GK3q3CXsTpQ
Content-Type: text/plain
Content-Transfer-Encoding: quoted-printable

Hi Tzafrir,

Am Donnerstag, den 14.04.2005, 14:46 +0300 schrieb Tzafrir Cohen:
> On Thu, Apr 14, 2005 at 01:18:53PM +0200, Kilian Krause wrote:
> > Hi Michel,
> >=20
> > > Bleh, no /etc/asterisk/voicemail.conf at
> > > /usr/lib/cgi-bin/asterisk/vmail.cgi line 96.
> >=20
> >=20
> > can you try "dpkg --force-depends -P asterisk-config;apt-get --reinstal=
l
> > install asterisk-config" please? I've no idea where this came from, but
> > i do indeed see the same issue with my box. Having asterisk-config
> > provide these files according to "dpkg -L asterisk-config", but the dir
> > being empty except for:
> > -rw-r--r--  1 root root 10345 Mar 21 11:23 indications.conf
> > -rw-r--r--  1 root root  2514 Mar 21 11:23 modem.conf
> > -rw-r--r--  1 root root  5020 Mar 21 11:23 queues.conf
> >=20
> > Do you reckon this is what you have too? And do you reckon the above
> > fixes the problem for you?
>=20
> Some files in the Asterisk configurations, specifically voicemail.conf
> that vmail.cgi died trying to read, contain passwords. Should they be
> world readable?

No.
Either suexec should be used or apache as whole user added to the
asterisk group.

--=20
Best regards,
 Kilian

--=-vXbRhwDS1GK3q3CXsTpQ
Content-Type: application/pgp-signature; name=signature.asc
Content-Description: Dies ist ein digital signierter Nachrichtenteil

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (GNU/Linux)

iD8DBQBCXlm0vdkzt4X+wX8RAsFkAJ9hiK//ldybU11auy1aVZbq0anYVACfTYG4
zlyPIIn9WD/o4wlq5Izv0Jw=
=vCDa
-----END PGP SIGNATURE-----

--=-vXbRhwDS1GK3q3CXsTpQ--