On Mon, Feb 21, 2005 at 08:59:58AM +0000, Steve Traylen wrote:
> On Sat, Feb 19, 2005 at 08:48:17PM +0000 or thereabouts, Kostas Georgiou wrote:
> > Hi,
> >
> > $ edg-gridftp-ls --verbose gsiftp://randomce/......./apel.conf
> > -rw-r--r-- 1 root root apel.conf
> >
> > $ head apel.conf
> > <DBURL>jdbc:mysql://thedbhost/accounting</DBURL>
> > <DBUsername>*******</DBUsername>
> > <DBPassword>*******</DBPassword>
> >
> > I had a look at a few uk sites and every single one has
> > apel.conf world readable. I imagine everyone followed
> > blindly the same recipe so all other sites have the same
> > permissions :(
>
> It should have course be corrected but reality is that R-GMA is completly
> open anyway so what is there is the lesser of two problems.
If everyone with a proxy has read/write access to the accounting records
why do we bother keeping them then? I did change the permissions of the
files here at Imperial and if it breaks something then the software needs
to be fixed.
Cheers,
Kostas
|