Please read this before reporting a bug:
https://wiki.archlinux.org/title/Bug_reporting_guidelines
Do NOT report bugs when a package is just outdated, or it is in the AUR. Use the 'flag out of date' link on the package page, or the Mailing List.
REPEAT: Do NOT report bugs for outdated packages!
https://wiki.archlinux.org/title/Bug_reporting_guidelines
Do NOT report bugs when a package is just outdated, or it is in the AUR. Use the 'flag out of date' link on the package page, or the Mailing List.
REPEAT: Do NOT report bugs for outdated packages!
FS#74422 - [miniflux] /etc/miniflux.conf should not be world readable as is can contain a password
Attached to Project:
Community Packages
Opened by desbma (desbma) - Saturday, 09 April 2022, 17:04 GMT
Last edited by George Rawlinson (rawlinsong) - Thursday, 28 April 2022, 02:12 GMT
Opened by desbma (desbma) - Saturday, 09 April 2022, 17:04 GMT
Last edited by George Rawlinson (rawlinsong) - Thursday, 28 April 2022, 02:12 GMT
|
DetailsThe file /etc/miniflux.conf will most certainly contain a password when the user will configure the DATABASE_URL variable (see https://miniflux.app/docs/configuration.html#database-url), and should therefore be created with 600 permission, not 644 (https://github.com/archlinux/svntogit-community/blob/packages/miniflux/trunk/PKGBUILD#L94).
|
This task depends upon
Closed by George Rawlinson (rawlinsong)
Thursday, 28 April 2022, 02:12 GMT
Reason for closing: Fixed
Additional comments about closing: Fixed in 2.0.36-2.
Thursday, 28 April 2022, 02:12 GMT
Reason for closing: Fixed
Additional comments about closing: Fixed in 2.0.36-2.