Bug#304615: asterisk-web-vmail: vmail.cgi can't access
voicemail.conf by default
Kilian Krause
kk@verfaction.de
Thu, 14 Apr 2005 13:53:24 +0200
--=-vXbRhwDS1GK3q3CXsTpQ
Content-Type: text/plain
Content-Transfer-Encoding: quoted-printable
Hi Tzafrir,
Am Donnerstag, den 14.04.2005, 14:46 +0300 schrieb Tzafrir Cohen:
> On Thu, Apr 14, 2005 at 01:18:53PM +0200, Kilian Krause wrote:
> > Hi Michel,
> >=20
> > > Bleh, no /etc/asterisk/voicemail.conf at
> > > /usr/lib/cgi-bin/asterisk/vmail.cgi line 96.
> >=20
> >=20
> > can you try "dpkg --force-depends -P asterisk-config;apt-get --reinstal=
l
> > install asterisk-config" please? I've no idea where this came from, but
> > i do indeed see the same issue with my box. Having asterisk-config
> > provide these files according to "dpkg -L asterisk-config", but the dir
> > being empty except for:
> > -rw-r--r-- 1 root root 10345 Mar 21 11:23 indications.conf
> > -rw-r--r-- 1 root root 2514 Mar 21 11:23 modem.conf
> > -rw-r--r-- 1 root root 5020 Mar 21 11:23 queues.conf
> >=20
> > Do you reckon this is what you have too? And do you reckon the above
> > fixes the problem for you?
>=20
> Some files in the Asterisk configurations, specifically voicemail.conf
> that vmail.cgi died trying to read, contain passwords. Should they be
> world readable?
No.
Either suexec should be used or apache as whole user added to the
asterisk group.
--=20
Best regards,
Kilian
--=-vXbRhwDS1GK3q3CXsTpQ
Content-Type: application/pgp-signature; name=signature.asc
Content-Description: Dies ist ein digital signierter Nachrichtenteil
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (GNU/Linux)
iD8DBQBCXlm0vdkzt4X+wX8RAsFkAJ9hiK//ldybU11auy1aVZbq0anYVACfTYG4
zlyPIIn9WD/o4wlq5Izv0Jw=
=vCDa
-----END PGP SIGNATURE-----
--=-vXbRhwDS1GK3q3CXsTpQ--