Re: [leafnode-list] unable to read configuration file

[Matthias Andree <ma@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>]

"Thomas D. Kryger" <thomas@xxxxxxxxxxx> writes:

> Just found the error myself. The owner/group on the config-file was not
> news, but root. Changing it to news.news fixed the problem

Better make it root.news and mode 0440 or 0640 so that it cannot be
overwritten should an exploit against leafnode be found in the
future. leafnode drops privileges to user "news" early, so that's one
more barrier there is to add.

-- 
Matthias Andree

"They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety."         Benjamin Franklin

-- 
leafnode-list@xxxxxxxxxxxxxxxxxxxxxxxxxxxx -- mailing list for leafnode
To unsubscribe, send mail with "unsubscribe" in the subject to the list