From ffe3c6ad2925254d665d0e5f1803e692119364ef Mon Sep 17 00:00:00 2001
From: "gerv%gerv.net" <>
Date: Fri, 4 Apr 2008 11:47:03 +0000
Subject: The first installment of Gerv's spanking of the Bugzilla Guide. This
is a work-in-progress.
---
docs/en/xml/administration.xml | 8 +++++---
1 file changed, 5 insertions(+), 3 deletions(-)
(limited to 'docs/en/xml/administration.xml')
diff --git a/docs/en/xml/administration.xml b/docs/en/xml/administration.xml
index 8794a0e2c..6789ca071 100644
--- a/docs/en/xml/administration.xml
+++ b/docs/en/xml/administration.xml
@@ -1373,12 +1373,14 @@ Group3, since he isn't in Group4.
make certain files world readable and/or writable. THIS IS
INSECURE!. This means that anyone who can get access to
your system can do whatever they want to your Bugzilla installation.
-
+
+
+
This also means that if your webserver runs all cgi scripts as the
same user/group, anyone on the system who can run cgi scripts will
be able to take control of your Bugzilla installation.
-
-
+
+
On Apache, you can use .htaccess files to protect access
to these directories, as outlined in Bug 57161 for the localconfig file, and Bug 65572 for adequate protection in your data/ and shadow/ directories.
--
cgit v1.2.3-24-g4f1b