Re: A more secure form of .htaccess?

Well, yes... you're right ! ** Never say impossible ** On Sat, 2002-04-27 at 02:27, martin f krafft wrote: also sprach eim [EMAIL PROTECTED] [2002.04.26.1757 +0200]: With https data will be encripted and it's impossible to find out login and password because they're not sent over the

world readable log files and /etc/ files

Hi, I was just cleaning up after rebuilding a machine, and I decided to take a look at the log file and /etc permissions. I was quite alarmed. There seem to be many files with world readable permissions, which _shouldnt_. ie: /var/log/xfer.log /var/log/samba/* /var/log/mailman/* and in /etc:

Re: world readable log files and /etc/ files

Previously Ian Cumming wrote: I was quite alarmed. There seem to be many files with world readable permissions, which _shouldnt_. If you don't trust your local users on a server you have a different problem imho. What is the policy for log files? I understand that it doesnt do _that_ much

Re: A more secure form of .htaccess?

Well, yes... you're right ! ** Never say impossible ** On Sat, 2002-04-27 at 02:27, martin f krafft wrote: also sprach eim [EMAIL PROTECTED] [2002.04.26.1757 +0200]: With https data will be encripted and it's impossible to find out login and password because they're not sent over the net

world readable log files and /etc/ files

Hi, I was just cleaning up after rebuilding a machine, and I decided to take a look at the log file and /etc permissions. I was quite alarmed. There seem to be many files with world readable permissions, which _shouldnt_. ie: /var/log/xfer.log /var/log/samba/* /var/log/mailman/* and in /etc:

Re: world readable log files and /etc/ files

Previously Ian Cumming wrote: I was quite alarmed. There seem to be many files with world readable permissions, which _shouldnt_. If you don't trust your local users on a server you have a different problem imho. What is the policy for log files? I understand that it doesnt do _that_ much