[horde] How to secure horde properly?

Maurício José T. Tecles mtecles at biof.ufrj.br
Thu Apr 6 18:41:02 UTC 2017


Citando Thomas Trepper <thomas.trepper at blueclaim.com>:

> Hi all,
>
> I have installed the latest version of horde webmail 5.2.19 via PEAR  
> and the install/wiki suggests to install it in /var/www/<something>  
> where /var/www is typically the document root.
> If I chown the directory now to allow www-data (apache) access I  
> think it can be abused as well - can’t it?
>
> What do I have to do to properly secure such a horde webmain  
> installation please?

See https://www.horde.org/apps/webmail/docs/INSTALL, 5. Securing Horde  
Groupware Webmail Edition.

Mauricio

>
> Thanks a lot in advance and all the best,
>
> Thomas
>
>
>
> --
> Horde mailing list
> Frequently Asked Questions: http://horde.org/faq/
> To unsubscribe, mail: horde-unsubscribe at lists.horde.org


-- 

Maurício José T. Tecles
Instituto de Biofísica Carlos Chagas Filho/UFRJ
Av. Carlos Chagas Filho, 373
Núcleo de Informática
CCS, Bloco G, sala G1-006
Cidade Universitária - Ilha do Fundão
21941-902, Rio de Janeiro - RJ

mtecles at biof.ufrj.br
Tel.: (21) 3938-6526 ou 3938-6544



More information about the horde mailing list