2013/10/22 Mathieu Parent <math.par...@gmail.com>: > Control: tag -1 + wontfix > > 2013/10/13 Mike Gabriel <mike.gabr...@das-netzwerkteam.de>: >> Package: php-horde >> Version: 5.1.4+debian0-1 >> >> To allow editing the Horde configuration administratively, two files need to >> be present in /etc/horde/horde. >> >> conf.php >> conf.bak.php >> >> Both files have to be writable by user www-data. > > I don't want this because this is a security hole IMO. > > But, I welcome a patch to: > - create those files owned by root > - improve the documentation (README.Debian)
Thinking a bit more. I propose to not create those 2 empty files. And to write a README.Debian file mentioning the three ways to configure Horde: - 1. Installaing a bundle [1] (php-horde-webmail or -groupware) and running the included script (webmail-install or groupware-), or - 2. configuring thru the web interface + download + chown root + chmod - 3. creating those 2 files + chown ww-data + configuring thru the web interface Mike, don't hesitate to directly commit to git. [1]: http://packages.debian.org/sid/horde-bundle Cheers, -- Mathieu -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
