search

f5vmr / svxlinkbuilder

Scripted build for Svxlink
GNU General Public License v3.0
3 stars 3 forks source link

Never ever do "chmod 777" #8

Closed brian32768 closed 3 months ago

brian32768 commented 3 months ago

In install.sh remove the line that chmods /etc/svxlink

You should never ever have any folder in /etc/ with no control on write access.

f5vmr commented 3 months ago

See my comments on the other post. I have yet to find a suitable security combination that permits the PHP webserver to operate succesfully on the files outside of the webserver within the svxlink operating system. As these devices are generally tightly secured under control of a single sysop on a relatively secure network, I have no issues with it although there are perhaps other options....... to follow.

brian32768 commented 3 months ago

On 2024-06-02 15:03, Chris G4NAB_F5VMR wrote:

Closed #8 as completed.

When you CLOSE AS COMPLETED it's like saying "this is DONE" when in fact it's a TERRIBLE security practice.

How about re-opening it and commenting "Brian, show how you'd fix this issue once you know more about it"?