Don't let www-data overwrite debian-db.php. Closes: #608976.

diff --git a/debian/changelog b/debian/changelog
index c53d4f3b329ff2448ad156538d587d0ab17467e8..d9a2570c3e5570e1b0c9abd67bdcb0fd924c7fd3 100644 (file)
--- a/debian/changelog
+++ b/debian/changelog
@@ -11,6 +11,7 @@ roundcube (0.5~rc-1) UNRELEASED; urgency=low
        Debian. We depends on jQuery 1.4.2 because 1.4.4 is not available in
        Debian.
   * Move .htaccess to /etc/roundcube and use a symlink (Closes: #591369).
+  * Don't let www-data overwrite debian-db.php. Closes: #608976.
   * Bump Standards-Version. No changes required.
 
  -- Vincent Bernat <bernat@debian.org>  Sat, 08 Jan 2011 15:15:56 +0100

diff --git a/debian/roundcube-core.postinst b/debian/roundcube-core.postinst
index 07e961f70b6b4409b6cbfef8880eb6c739ea08ca..cb7e507b465c9b46241751f4802f390f360e8994 100644 (file)
--- a/debian/roundcube-core.postinst
+++ b/debian/roundcube-core.postinst
@@ -9,7 +9,7 @@ set -e
 . /usr/share/dbconfig-common/dpkg/postinst 
 dbc_generate_include=php:/etc/roundcube/debian-db.php
 dbc_generate_include_owner="www-data:www-data"
-dbc_generate_include_perms="660"
+dbc_generate_include_perms="640"
 dbc_dbfile_owner="www-data:www-data"
 dbc_dbfile_perms="0660"
 dbc_dbuser=roundcube