[Fusionforge-general] How to email SCM commits ?

Michael Kluge michael.kluge at tu-dresden.de
Tue Feb 12 17:53:50 CET 2013


>> The problem is : /etc/gforge/config.ini.d/debian-install-secrets.ini
>> has mod 600. It silently fails to read it.
>> -rw------- 1 gforge root  544 févr. 11 11:48 debian-install-secrets.ini
>> What's best : change the perms for this file or use sudo in the post-commit
>> hook ?
>
>    If you change the permissions for this file, it means anyone will have
> full access to the database (because the file contains the credentials).
> If you use sudo, make sure you limit the available commands.

But any action started through the web interface (like requesting a new 
user account) needs to access the DB, right? How is this done if 
www-data can't read the DB credentials?


Micha




More information about the Fusionforge-general mailing list