From 4afbaf3562d1570fdbbbab98b6e46fc4eb7d7cb0 Mon Sep 17 00:00:00 2001 From: lapineige Date: Wed, 7 Apr 2021 09:46:05 +0200 Subject: [PATCH] Reduces access permissions to db password (during upgrade) --- scripts/upgrade | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/scripts/upgrade b/scripts/upgrade index 1170198..8302337 100644 --- a/scripts/upgrade +++ b/scripts/upgrade @@ -191,13 +191,14 @@ fi # SECURE FILES AND DIRECTORIES #================================================= -# Restrict rights to Wallabag user only -chmod 600 $wb_conf - # Set permissions to app files chown -R $app: $final_path chmod 755 $final_path +# Restrict rights to Wallabag user only +chmod 600 $wb_conf # parameter file should not be accessible by any other user +chmod 700 $final_path/var/cache/prod/appProdProjectContainer.php # contains database password, should not be readable by another user + #================================================= # SETUP HOOKS #=================================================