Page 1 of 1
Security Script or Module
Posted: Mon Sep 15, 2008 7:07 pm
by kendo451
- Since I set up a lot of CMSMS sites, I have written a bash script that does the following after I have completed the install:
- Delete install directory
- chmod 444 all files and directories
- chmod 777 the files & directories that need this
It seems to me that it would be quite helpful to make a module called "Security" that does this as well as adding the lines to the various .htaccess files that are recommended in the security thread.
This would allow a newbie without SSH to implement a standard security scheme automatically. Granted it wouldn't solve all problems or plug all holes, but it would be a nice feature.
Re: Security Script or Module
Posted: Mon Oct 13, 2008 10:16 pm
by toto
Yes it will be very good to have a security plugin.
Re: Security Script or Module
Posted: Tue Oct 14, 2008 4:58 pm
by Pierre M.
Hello,
I like your idea of "post install hardening" as I like "deny from all" in htaccess in /lib or so.
I don't know if a module is the right implementation.
Pierre M.