Skip to content
This repository has been archived by the owner on Jul 26, 2024. It is now read-only.

Security: only chown state directories to etherpad::user #88

Open
igalic opened this issue Aug 22, 2019 · 0 comments
Open

Security: only chown state directories to etherpad::user #88

igalic opened this issue Aug 22, 2019 · 0 comments

Comments

@igalic
Copy link
Contributor

igalic commented Aug 22, 2019

Currently, the entire application directory belongs etherpad::user
This seems unnecessary. We should chown the "state" directories.

The only problem then is the APIKEY.txt and SESSIONKEY.txt, which are created on the first run: ether/etherpad-lite#3317
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@igalic