1

Topic: Security hotfix: Protect config files which contains passwords

Hi, all.

iRedMail didn't set strict file permission on config files, even they contain username/passwords. Here's a quick fix (just some commands with chown/chmod/chgrp):
http://www.iredmail.org/wiki/index.php? … gure.Files

if you found that we missed some other files, please do contact us.

Credits

Thanks very much to rizkiwicaksono for his contribution.

P.S. This has been merged into iRedMail -trunk edition.

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.