iRedAdmin is application panel for iRedmail (see www.iredmail.org). settings.ini is by default world-readable file and since that file contains LDAP/MySQL username and password we need to protect that file.
In this video i show how to make iredadmin run as non-apache user and then make settings.ini only readable by iredadmin user.
Link to this comment:
All Comments (0)