Addition/Protect.Configure.Files

From iRedMail

(Difference between revisions)
Jump to: navigation, search
(Created page with 'iRedMail-0.6.0 and earlier versions didn't set strict file permission on config files, even they contain username/passwords. Here's a quick fix: * On RHEL/CentOS: {{cmd|<pre> # …')
Line 1: Line 1:
-
iRedMail-0.6.0 and earlier versions didn't set strict file permission on config files, even they contain username/passwords. Here's a quick fix:
+
iRedMail-0.6.0 and earlier versions didn't set strict file permission on config files, even they contain username/passwords. Below's a quick fix, if you found that we missed some other files, please [http://www.iredmail.org/contact.html contact us].
* On RHEL/CentOS:
* On RHEL/CentOS:
{{cmd|<pre>
{{cmd|<pre>
-
# chmod 0600 /etc/httpd/conf.d/awstats.conf                        # Awstats
 
# chmod 0500 /etc/dovecot.conf /etc/dovecot-ldap.conf /etc/dovecot-mysql.conf        # Dovecot
# chmod 0500 /etc/dovecot.conf /etc/dovecot-ldap.conf /etc/dovecot-mysql.conf        # Dovecot
# chmod 0640 /etc/postfix/ldap_*.cf /etc/postfix/mysql_*cf        # Postfix
# chmod 0640 /etc/postfix/ldap_*.cf /etc/postfix/mysql_*cf        # Postfix
 +
# chmod 0600 /etc/httpd/conf.d/awstats.conf                        # Awstats
</pre>}}
</pre>}}
 +
 +
* On Debian/Ubuntu:
 +
 +
* On FreeBSD:

Revision as of 08:32, 25 July 2010

iRedMail-0.6.0 and earlier versions didn't set strict file permission on config files, even they contain username/passwords. Below's a quick fix, if you found that we missed some other files, please contact us.

  • On RHEL/CentOS:
Terminal:
# chmod 0500 /etc/dovecot.conf /etc/dovecot-ldap.conf /etc/dovecot-mysql.conf        # Dovecot
# chmod 0640 /etc/postfix/ldap_*.cf /etc/postfix/mysql_*cf        # Postfix
# chmod 0600 /etc/httpd/conf.d/awstats.conf                        # Awstats
  • On Debian/Ubuntu:
  • On FreeBSD:
Personal tools