Commit 9d8a61ca authored by cyeh%bluemartini.com's avatar cyeh%bluemartini.com

add notation about securing web installation

parent 691b068e
...@@ -275,6 +275,13 @@ If you are using a newer version of Apache, both of the above lines will be ...@@ -275,6 +275,13 @@ If you are using a newer version of Apache, both of the above lines will be
(or will need to be) in the httpd.conf file, rather than srm.conf or (or will need to be) in the httpd.conf file, rather than srm.conf or
access.conf. access.conf.
There are two critical directories and a file that should not be a served by
the HTTP server. These are the 'data' and 'shadow' directories and the
'localconfig' file. You should configure your HTTP server to not serve
content from these files. Failure to do so will expose critical passwords
and other data. Please see your HTTP server configuration manual on how
to do this.
2. Installing the Bugzilla Files 2. Installing the Bugzilla Files
You should untar the Bugzilla files into a directory that you're You should untar the Bugzilla files into a directory that you're
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment