I pointed this out some time ago, but nobody appeared
to be listening...
Barry.
On Sat, 19 Feb 2005, Kostas Georgiou wrote:
> Date: Sat, 19 Feb 2005 20:48:17 +0000
> From: Kostas Georgiou <[log in to unmask]>
> Reply-To: Testbed Support for GridPP member institutes
> <[log in to unmask]>
> To: [log in to unmask]
> Subject: Accounting database...
>
> Hi,
>
> $ edg-gridftp-ls --verbose gsiftp://randomce/......./apel.conf
> -rw-r--r-- 1 root root apel.conf
>
> $ head apel.conf
> <DBURL>jdbc:mysql://thedbhost/accounting</DBURL>
> <DBUsername>*******</DBUsername>
> <DBPassword>*******</DBPassword>
>
> I had a look at a few uk sites and every single one has
> apel.conf world readable. I imagine everyone followed
> blindly the same recipe so all other sites have the same
> permissions :(
>
> Cheers,
> Kostas
>
---------------------------------------------------------
Dr Barry MacEvoy
High Energy Physics Group
Imperial College London
Blackett Laboratory
Prince Consort Road Tel: 020 7594 7802
LONDON SW7 2BZ Mobile: 07767 323871
England Fax: 020 7823 8830
---------------------------------------------------------
|