Hello!

I have a problem with the permissions on configuration files modified by
the BackupPC GUI.  The files are given 644 permissions, and owned by
backuppc:apache.

This is a problem.  With 644 permissions, my rsyncd passwords are now
world-readable.  That is a deal-killer.  Also, from my tests it does not
seem that apache needs to have group ownership.  After all, the CGI script
is running setuid as backuppc, right?

I've manually set the permissions to 640 backuppc:backuppc, and it seems to
be fine.  Is it possible to reconfigure the GUI to maintain this?

Thank you,

Tim Massey


-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
BackupPC-users mailing list
BackupPC-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/backuppc-users
http://backuppc.sourceforge.net/

Reply via email to