From: Vincent Bernat Date: Sat, 8 Jan 2011 15:12:35 +0000 (+0000) Subject: Don't let www-data overwrite debian-db.php. Closes: #608976. X-Git-Url: https://git.donarmstrong.com/?a=commitdiff_plain;h=7c1332a6ec672413218ff2deb2563287135fd221;p=roundcube.git Don't let www-data overwrite debian-db.php. Closes: #608976. --- diff --git a/debian/changelog b/debian/changelog index c53d4f3..d9a2570 100644 --- a/debian/changelog +++ b/debian/changelog @@ -11,6 +11,7 @@ roundcube (0.5~rc-1) UNRELEASED; urgency=low Debian. We depends on jQuery 1.4.2 because 1.4.4 is not available in Debian. * Move .htaccess to /etc/roundcube and use a symlink (Closes: #591369). + * Don't let www-data overwrite debian-db.php. Closes: #608976. * Bump Standards-Version. No changes required. -- Vincent Bernat Sat, 08 Jan 2011 15:15:56 +0100 diff --git a/debian/roundcube-core.postinst b/debian/roundcube-core.postinst index 07e961f..cb7e507 100644 --- a/debian/roundcube-core.postinst +++ b/debian/roundcube-core.postinst @@ -9,7 +9,7 @@ set -e . /usr/share/dbconfig-common/dpkg/postinst dbc_generate_include=php:/etc/roundcube/debian-db.php dbc_generate_include_owner="www-data:www-data" -dbc_generate_include_perms="660" +dbc_generate_include_perms="640" dbc_dbfile_owner="www-data:www-data" dbc_dbfile_perms="0660" dbc_dbuser=roundcube