Addition/Protect.Configure.Files - Revision history

ZhangHuangbin at 09:05, 25 July 2010

ZhangHuangbin — Sun, 25 Jul 2010 09:05:59 GMT

← Older revision		Revision as of 09:05, 25 July 2010
Line 9:		Line 9:
	{{cmd\|<pre>		{{cmd\|<pre>
	# chmod 0500 /etc/dovecot-ldap.conf /etc/dovecot-mysql.conf # Dovecot		# chmod 0500 /etc/dovecot-ldap.conf /etc/dovecot-mysql.conf # Dovecot
		+	# chgrp postfix /etc/postfix/ldap_.cf /etc/postfix/mysql_.cf # Postfix
	# chmod 0640 /etc/postfix/ldap_.cf /etc/postfix/mysql_cf # Postfix		# chmod 0640 /etc/postfix/ldap_.cf /etc/postfix/mysql_cf # Postfix
	# chmod 0640 /etc/amavisd.conf # Amavisd		# chmod 0640 /etc/amavisd.conf # Amavisd
Line 20:		Line 21:
	{{cmd\|<pre>		{{cmd\|<pre>
	# chmod 0500 /etc/dovecot/dovecot-ldap.conf /etc/dovecot/dovecot-mysql.conf # Dovecot		# chmod 0500 /etc/dovecot/dovecot-ldap.conf /etc/dovecot/dovecot-mysql.conf # Dovecot
		+	# chgrp postfix /etc/postfix/ldap_.cf /etc/postfix/mysql_.cf # Postfix
	# chmod 0640 /etc/postfix/ldap_.cf /etc/postfix/mysql_cf # Postfix		# chmod 0640 /etc/postfix/ldap_.cf /etc/postfix/mysql_cf # Postfix
	# chmod 0640 /etc/amavis/conf.d/50-user # Amavisd		# chmod 0640 /etc/amavis/conf.d/50-user # Amavisd

ZhangHuangbin at 09:00, 25 July 2010

ZhangHuangbin — Sun, 25 Jul 2010 09:00:24 GMT

← Older revision		Revision as of 09:00, 25 July 2010
Line 30:		Line 30:
	* On FreeBSD:		* On FreeBSD:
	{{cmd\|<pre>		{{cmd\|<pre>
-	# chmod 0500 /etc/dovecot-ldap.conf /etc/dovecot-mysql.conf # Dovecot	+	# chmod 0500 /usr/local/etc/dovecot-ldap.conf /usr/local/etc/dovecot-mysql.conf # Dovecot
-	# chmod 0640 /etc/postfix/ldap_.cf /etc/postfix/mysql_cf # Postfix	+	# chgrp postfix /usr/local/etc/postfix/ldap_.cf /usr/local/etc/postfix/mysql_.cf # Postfix
		+	# chmod 0640 /usr/local/etc/postfix/ldap_.cf /usr/local/etc/postfix/mysql_cf # Postfix
	# chmod 0640 /usr/local/etc/amavisd.conf # Amavisd		# chmod 0640 /usr/local/etc/amavisd.conf # Amavisd
	# chown -R root:root /usr/local/www/roundcubemail/ # Roundcube Webmail		# chown -R root:root /usr/local/www/roundcubemail/ # Roundcube Webmail

ZhangHuangbin at 08:55, 25 July 2010

ZhangHuangbin — Sun, 25 Jul 2010 08:55:45 GMT

← Older revision		Revision as of 08:55, 25 July 2010
Line 22:		Line 22:
	# chmod 0640 /etc/postfix/ldap_.cf /etc/postfix/mysql_cf # Postfix		# chmod 0640 /etc/postfix/ldap_.cf /etc/postfix/mysql_cf # Postfix
	# chmod 0640 /etc/amavis/conf.d/50-user # Amavisd		# chmod 0640 /etc/amavis/conf.d/50-user # Amavisd
-	# chown -R root:root /usr/share/roundcubemail-x.y.z/ # Roundcube Webmail	+	# chown -R root:root /usr/share/apache2/roundcubemail-x.y.z/ # Roundcube Webmail
-	# chown www-data:www-data /usr/share/roundcubemail-x.y.z/config/*inc.php	+	# chown www-data:www-data /usr/share/apache2/roundcubemail-x.y.z/config/*inc.php
-	# chmod 0640 /usr/share/roundcubemail-x.y.z/config/*inc.php	+	# chmod 0640 /usr/share/apache2/roundcubemail-x.y.z/config/*inc.php
	# chmod 0600 /etc/apache2/conf.d/awstats.conf # Awstats		# chmod 0600 /etc/apache2/conf.d/awstats.conf # Awstats
	</pre>}}		</pre>}}

ZhangHuangbin at 08:54, 25 July 2010

ZhangHuangbin — Sun, 25 Jul 2010 08:54:48 GMT

← Older revision		Revision as of 08:54, 25 July 2010
Line 11:		Line 11:
	# chmod 0640 /etc/postfix/ldap_.cf /etc/postfix/mysql_cf # Postfix		# chmod 0640 /etc/postfix/ldap_.cf /etc/postfix/mysql_cf # Postfix
	# chmod 0640 /etc/amavisd.conf # Amavisd		# chmod 0640 /etc/amavisd.conf # Amavisd
		+	# chown -R root:root /var/www/roundcubemail-x.y.z/ # Roundcube Webmail
		+	# chown apache:apache /var/www/roundcubemail-x.y.z/config/*inc.php
		+	# chmod 0640 /var/www/roundcubemail-x.y.z/config/*inc.php
	# chmod 0600 /etc/httpd/conf.d/awstats.conf # Awstats		# chmod 0600 /etc/httpd/conf.d/awstats.conf # Awstats
	</pre>}}		</pre>}}
Line 19:		Line 22:
	# chmod 0640 /etc/postfix/ldap_.cf /etc/postfix/mysql_cf # Postfix		# chmod 0640 /etc/postfix/ldap_.cf /etc/postfix/mysql_cf # Postfix
	# chmod 0640 /etc/amavis/conf.d/50-user # Amavisd		# chmod 0640 /etc/amavis/conf.d/50-user # Amavisd
		+	# chown -R root:root /usr/share/roundcubemail-x.y.z/ # Roundcube Webmail
		+	# chown www-data:www-data /usr/share/roundcubemail-x.y.z/config/*inc.php
		+	# chmod 0640 /usr/share/roundcubemail-x.y.z/config/*inc.php
	# chmod 0600 /etc/apache2/conf.d/awstats.conf # Awstats		# chmod 0600 /etc/apache2/conf.d/awstats.conf # Awstats
	</pre>}}		</pre>}}
Line 27:		Line 33:
	# chmod 0640 /etc/postfix/ldap_.cf /etc/postfix/mysql_cf # Postfix		# chmod 0640 /etc/postfix/ldap_.cf /etc/postfix/mysql_cf # Postfix
	# chmod 0640 /usr/local/etc/amavisd.conf # Amavisd		# chmod 0640 /usr/local/etc/amavisd.conf # Amavisd
		+	# chown -R root:root /usr/local/www/roundcubemail/ # Roundcube Webmail
		+	# chown www:www /usr/local/www/roundcubemail/config/*inc.php
		+	# chmod 0640 /usr/local/www/roundcubemail/config/*inc.php
	# chmod 0600 /usr/local/etc/apache22/Includes/awstats.conf # Awstats		# chmod 0600 /usr/local/etc/apache22/Includes/awstats.conf # Awstats
	</pre>}}		</pre>}}

ZhangHuangbin at 08:48, 25 July 2010

ZhangHuangbin — Sun, 25 Jul 2010 08:48:30 GMT

← Older revision		Revision as of 08:48, 25 July 2010
Line 10:		Line 10:
	# chmod 0500 /etc/dovecot-ldap.conf /etc/dovecot-mysql.conf # Dovecot		# chmod 0500 /etc/dovecot-ldap.conf /etc/dovecot-mysql.conf # Dovecot
	# chmod 0640 /etc/postfix/ldap_.cf /etc/postfix/mysql_cf # Postfix		# chmod 0640 /etc/postfix/ldap_.cf /etc/postfix/mysql_cf # Postfix
		+	# chmod 0640 /etc/amavisd.conf # Amavisd
	# chmod 0600 /etc/httpd/conf.d/awstats.conf # Awstats		# chmod 0600 /etc/httpd/conf.d/awstats.conf # Awstats
	</pre>}}		</pre>}}
Line 17:		Line 18:
	# chmod 0500 /etc/dovecot/dovecot-ldap.conf /etc/dovecot/dovecot-mysql.conf # Dovecot		# chmod 0500 /etc/dovecot/dovecot-ldap.conf /etc/dovecot/dovecot-mysql.conf # Dovecot
	# chmod 0640 /etc/postfix/ldap_.cf /etc/postfix/mysql_cf # Postfix		# chmod 0640 /etc/postfix/ldap_.cf /etc/postfix/mysql_cf # Postfix
		+	# chmod 0640 /etc/amavis/conf.d/50-user # Amavisd
	# chmod 0600 /etc/apache2/conf.d/awstats.conf # Awstats		# chmod 0600 /etc/apache2/conf.d/awstats.conf # Awstats
	</pre>}}		</pre>}}
Line 24:		Line 26:
	# chmod 0500 /etc/dovecot-ldap.conf /etc/dovecot-mysql.conf # Dovecot		# chmod 0500 /etc/dovecot-ldap.conf /etc/dovecot-mysql.conf # Dovecot
	# chmod 0640 /etc/postfix/ldap_.cf /etc/postfix/mysql_cf # Postfix		# chmod 0640 /etc/postfix/ldap_.cf /etc/postfix/mysql_cf # Postfix
		+	# chmod 0640 /usr/local/etc/amavisd.conf # Amavisd
	# chmod 0600 /usr/local/etc/apache22/Includes/awstats.conf # Awstats		# chmod 0600 /usr/local/etc/apache22/Includes/awstats.conf # Awstats
	</pre>}}		</pre>}}

ZhangHuangbin at 08:43, 25 July 2010

ZhangHuangbin — Sun, 25 Jul 2010 08:43:34 GMT

← Older revision		Revision as of 08:43, 25 July 2010
Line 8:		Line 8:
	* On RHEL/CentOS:		* On RHEL/CentOS:
	{{cmd\|<pre>		{{cmd\|<pre>
-	# chmod 0500 ~~/etc/dovecot.conf~~ /etc/dovecot-ldap.conf /etc/dovecot-mysql.conf # Dovecot	+	# chmod 0500 /etc/dovecot-ldap.conf /etc/dovecot-mysql.conf # Dovecot
	# chmod 0640 /etc/postfix/ldap_.cf /etc/postfix/mysql_cf # Postfix		# chmod 0640 /etc/postfix/ldap_.cf /etc/postfix/mysql_cf # Postfix
	# chmod 0600 /etc/httpd/conf.d/awstats.conf # Awstats		# chmod 0600 /etc/httpd/conf.d/awstats.conf # Awstats
Line 15:		Line 15:
	* On Debian/Ubuntu:		* On Debian/Ubuntu:
	{{cmd\|<pre>		{{cmd\|<pre>
-	# chmod 0500 ~~/etc/dovecot/dovecot.conf~~ /etc/dovecot/dovecot-ldap.conf /etc/dovecot/dovecot-mysql.conf # Dovecot	+	# chmod 0500 /etc/dovecot/dovecot-ldap.conf /etc/dovecot/dovecot-mysql.conf # Dovecot
	# chmod 0640 /etc/postfix/ldap_.cf /etc/postfix/mysql_cf # Postfix		# chmod 0640 /etc/postfix/ldap_.cf /etc/postfix/mysql_cf # Postfix
	# chmod 0600 /etc/apache2/conf.d/awstats.conf # Awstats		# chmod 0600 /etc/apache2/conf.d/awstats.conf # Awstats
Line 22:		Line 22:
	* On FreeBSD:		* On FreeBSD:
	{{cmd\|<pre>		{{cmd\|<pre>
-	# chmod 0500 ~~/etc/dovecot.conf~~ /etc/dovecot-ldap.conf /etc/dovecot-mysql.conf # Dovecot	+	# chmod 0500 /etc/dovecot-ldap.conf /etc/dovecot-mysql.conf # Dovecot
	# chmod 0640 /etc/postfix/ldap_.cf /etc/postfix/mysql_cf # Postfix		# chmod 0640 /etc/postfix/ldap_.cf /etc/postfix/mysql_cf # Postfix
	# chmod 0600 /usr/local/etc/apache22/Includes/awstats.conf # Awstats		# chmod 0600 /usr/local/etc/apache22/Includes/awstats.conf # Awstats
	</pre>}}		</pre>}}

ZhangHuangbin at 08:37, 25 July 2010

ZhangHuangbin — Sun, 25 Jul 2010 08:37:03 GMT

← Older revision		Revision as of 08:37, 25 July 2010
Line 1:		Line 1:
	iRedMail-0.6.0 and earlier versions didn't set strict file permission on config files, even they contain username/passwords. Below's a quick fix, if you found that we missed some other files, please [http://www.iredmail.org/contact.html contact us].		iRedMail-0.6.0 and earlier versions didn't set strict file permission on config files, even they contain username/passwords. Below's a quick fix, if you found that we missed some other files, please [http://www.iredmail.org/contact.html contact us].

		+	Note:
		+	* iRedAPD-1.3.3 is set to run as a low privilege user, if you didn't upgrade it, please reinstall it with [[Install/iRedAPD/OpenLDAP\|iRedAPD install tutorial]].
		+	* iRedAdmin is set to run as a low privilege user, if you didn't apply this, please read this simple tutorial: [[Addition/Secure.Your.Exist.iRedAdmin\|Secure your exist iRedAdmin]].
		+
		+	Steps:
	* On RHEL/CentOS:		* On RHEL/CentOS:
	{{cmd\|<pre>		{{cmd\|<pre>

ZhangHuangbin at 08:33, 25 July 2010

ZhangHuangbin — Sun, 25 Jul 2010 08:33:55 GMT

← Older revision		Revision as of 08:33, 25 July 2010
Line 9:		Line 9:

	* On Debian/Ubuntu:		* On Debian/Ubuntu:
		+	{{cmd\|<pre>
		+	# chmod 0500 /etc/dovecot/dovecot.conf /etc/dovecot/dovecot-ldap.conf /etc/dovecot/dovecot-mysql.conf # Dovecot
		+	# chmod 0640 /etc/postfix/ldap_.cf /etc/postfix/mysql_cf # Postfix
		+	# chmod 0600 /etc/apache2/conf.d/awstats.conf # Awstats
		+	</pre>}}

	* On FreeBSD:		* On FreeBSD:
		+	{{cmd\|<pre>
		+	# chmod 0500 /etc/dovecot.conf /etc/dovecot-ldap.conf /etc/dovecot-mysql.conf # Dovecot
		+	# chmod 0640 /etc/postfix/ldap_.cf /etc/postfix/mysql_cf # Postfix
		+	# chmod 0600 /usr/local/etc/apache22/Includes/awstats.conf # Awstats
		+	</pre>}}

ZhangHuangbin at 08:32, 25 July 2010

ZhangHuangbin — Sun, 25 Jul 2010 08:32:13 GMT

← Older revision		Revision as of 08:32, 25 July 2010
Line 1:		Line 1:
-	iRedMail-0.6.0 and earlier versions didn't set strict file permission on config files, even they contain username/passwords. ~~Here~~'s a quick fix:	+	iRedMail-0.6.0 and earlier versions didn't set strict file permission on config files, even they contain username/passwords. Below's a quick fix, if you found that we missed some other files, please [http://www.iredmail.org/contact.html contact us].

	* On RHEL/CentOS:		* On RHEL/CentOS:
	{{cmd\|<pre>		{{cmd\|<pre>
-	~~# chmod 0600 /etc/httpd/conf.d/awstats.conf # Awstats~~
	# chmod 0500 /etc/dovecot.conf /etc/dovecot-ldap.conf /etc/dovecot-mysql.conf # Dovecot		# chmod 0500 /etc/dovecot.conf /etc/dovecot-ldap.conf /etc/dovecot-mysql.conf # Dovecot
	# chmod 0640 /etc/postfix/ldap_.cf /etc/postfix/mysql_cf # Postfix		# chmod 0640 /etc/postfix/ldap_.cf /etc/postfix/mysql_cf # Postfix
		+	# chmod 0600 /etc/httpd/conf.d/awstats.conf # Awstats
	</pre>}}		</pre>}}
		+
		+	* On Debian/Ubuntu:
		+
		+	* On FreeBSD:

ZhangHuangbin: Created page with 'iRedMail-0.6.0 and earlier versions didn't set strict file permission on config files, even they contain username/passwords. Here's a quick fix: * On RHEL/CentOS: {{cmd|

 # …'

ZhangHuangbin — Sun, 25 Jul 2010 08:29:44 GMT

Created page with 'iRedMail-0.6.0 and earlier versions didn't set strict file permission on config files, even they contain username/passwords. Here's a quick fix: * On RHEL/CentOS: {{cmd|<pre> # …'

New page

iRedMail-0.6.0 and earlier versions didn't set strict file permission on config files, even they contain username/passwords. Here's a quick fix:

* On RHEL/CentOS:
{{cmd|<pre>
# chmod 0600 /etc/httpd/conf.d/awstats.conf # Awstats
# chmod 0500 /etc/dovecot.conf /etc/dovecot-ldap.conf /etc/dovecot-mysql.conf # Dovecot
# chmod 0640 /etc/postfix/ldap_*.cf /etc/postfix/mysql_*cf # Postfix
</pre>}}