[aseek-devel] Permissions of /etc/aspseek and its files.

From: ebola (no email)
Date: Tue Dec 25 2001 - 02:23:55 EST


Hello all first of all I would like to wish all happy holidays, and the
best in the new year.

On the other hand I would just like to point out that the /etc/aspseek
directory and the configuration files below it should have more
restrictive permissions.

If not then at least the db.conf 0644 is not good, due to local users
have access to recouver the DB password. I suggest 0750 for the dir's
and 0640 for the files, which should also require a 'chown -Rf
root.aspseek /etc/aspseek'.

Adam Gregoire
ICQ 49107658








Hosted Email Solutions

Invaluement Anti-Spam DNSBLs



Powered By FreeBSD   Powered By FreeBSD