[Fusionforge-general] How to email SCM commits ?
Michael Kluge
michael.kluge at tu-dresden.de
Tue Feb 12 17:53:50 CET 2013
>> The problem is : /etc/gforge/config.ini.d/debian-install-secrets.ini
>> has mod 600. It silently fails to read it.
>> -rw------- 1 gforge root 544 févr. 11 11:48 debian-install-secrets.ini
>> What's best : change the perms for this file or use sudo in the post-commit
>> hook ?
>
> If you change the permissions for this file, it means anyone will have
> full access to the database (because the file contains the credentials).
> If you use sudo, make sure you limit the available commands.
But any action started through the web interface (like requesting a new
user account) needs to access the DB, right? How is this done if
www-data can't read the DB credentials?
Micha
More information about the Fusionforge-general
mailing list