search

scVENUS / PeekabooAV-Installer

This repository provides scripts and configuration files to install, update and test a Peekaboo installation
GNU General Public License v3.0
7 stars 9 forks source link

Owner of peekaboo.conf can be root only group and mode needs to be changed #27

Closed Jack28 closed 4 years ago

Jack28 commented 5 years ago

https://github.com/scVENUS/PeekabooAV-Installer/blob/72074cfd6326914ff2cf09073e7d476142961bf0/PeekabooAV-install.yml#L241

Commit https://github.com/scVENUS/PeekabooAV-Installer/commit/763476fd5d696837b2c896fb92b01652284f821d changed the owner to peekaboo and allows it to read and write to it.

I want to suggest to change only the group to peekaboo and mode to 640. This way peekaboo can read but not write to it and database password is secure from others.

        group: peekaboo
        mode: 0640