[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Debian Wheezy Compromised - www-data user is sending 1000 emails an hour



On Sat, Jan 04, 2014 at 10:13:00PM -0500, Jerry Stuckle wrote:
> On 1/4/2014 9:57 PM, Chris Bannister wrote:
> >On Sat, Jan 04, 2014 at 08:56:14PM -0500, Jerry Stuckle wrote:
> >>Setting up a phpmyadmin config file is hardly "system
> >>administration". It's configuration affects only itself, not the
> >>entire system.
> >
> >Can any average user joe bloggs configure phpmyadmin? If not (and I
> >suspect not, otherwise pandemonium is the result) then it is a system
> >administration task!
> >
> 
> Only in Debian is phpMyAdmin owned by root.  And no, it does NOT
> have to be configured by the system administrator.  A website
> administrator could configure it, for instance.

Sigh! For the purposes of this list, that *is* system administration if
the phpmyadmin config file is under a system directory.  Don't confuse
debian-user with debian-enterprise and/or debian-isp.

-- 
"If you're not careful, the newspapers will have you hating the people
who are being oppressed, and loving the people who are doing the 
oppressing." --- Malcolm X


Reply to: