Skip to content

Commit dfdaf8d

Browse files
authored
Fix permissions issue ( security )
Same issue happen in debian, in my centos 6 installs always get /etc/roundcubemail/config.inc.php whit 644 whit roundcube password exposed. In centos bad user:group is asigned so also fixed This will be fixed in general update in current installed vestacp servers.
1 parent 39f0fa8 commit dfdaf8d

File tree

1 file changed

+2
-0
lines changed

1 file changed

+2
-0
lines changed

install/vst-install-rhel.sh

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1171,6 +1171,8 @@ if [ "$exim" = 'yes' ] && [ "$mysql" = 'yes' ]; then
11711171
mysql -e "CREATE DATABASE roundcube"
11721172
mysql -e "GRANT ALL ON roundcube.* TO roundcube@localhost IDENTIFIED BY '$r'"
11731173
sed -i "s/%password%/$r/g" /etc/roundcubemail/config.inc.php
1174+
chmod 640 /etc/roundcubemail/config.inc.php
1175+
chown root:apache /etc/roundcubemail/config.inc.php
11741176
if [ -e "/usr/share/roundcubemail/SQL/mysql.initial.sql" ]; then
11751177
mysql roundcube < /usr/share/roundcubemail/SQL/mysql.initial.sql
11761178
else

0 commit comments

Comments
 (0)