UnicornGlobal / vault

Secure Document Storage
MIT License
2 stars 2 forks source link

incorrect email address used #18

Open goblinfactory opened 4 years ago

goblinfactory commented 4 years ago

Hi guys

your github project appeared on an audit report as using one of our email addresses, "admin@vault.co.za". this is in your readme.md in your vhost configuration

<IfModule mod_ssl.c>
        <VirtualHost _default_:443>
                ServerAdmin admin@vault.co.za
                ServerName 1.1.1.1

                DocumentRoot /srv/vault/public

                ErrorLog ${APACHE_LOG_DIR}/error.log
                CustomLog ${APACHE_LOG_DIR}/access.log combined

                SSLEngine on

                SSLCertificateFile      /etc/ssl/certs/vault-ssl.cert
                SSLCertificateKeyFile /etc/ssl/private/vault-ssl.key

                <FilesMatch "\.(cgi|shtml|phtml|php)$">
                                SSLOptions +StdEnvVars
                </FilesMatch>
                <Directory /usr/lib/cgi-bin>
                                SSLOptions +StdEnvVars
                </Directory>

        </VirtualHost>
</IfModule>

Can you please update your source code so that it no longer triggers a security warning that would be most appreciated.

regards,

Alan

what a small world! :D

issue-label-bot[bot] commented 4 years ago

Issue-Label Bot is automatically applying the label bug to this issue, with a confidence of 0.75. Please mark this comment with :thumbsup: or :thumbsdown: to give our bot feedback!

Links: app homepage, dashboard and code for this bot.