Please do not reply directly to this email. All additional comments should be made in the comments box of this bug report. Summary: Review Request: drupal - An open-source content-management platform https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=241757 ------- Additional Comments From limb@xxxxxxxxxxxx 2007-06-06 12:33 EST ------- Spec URL: http://zanoni.jcomserv.net/fedora/drupal/drupal.spec SRPM URL: http://zanoni.jcomserv.net/fedora/drupal/drupal-5.1-3.src.rpm Corrected. I assume having settings.php writable by default should be Ok, since on a new install, it's locked down to localhost, and on an upgrade, it's %config. Of course, a malicious user on the same system could always configure Drupal in the time between the RPM installation and when the admin goes to do it herself, but then I suspect that's an extreme corner case. :) -- Configure bugmail: https://bugzilla.redhat.com/bugzilla/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the QA contact for the bug, or are watching the QA contact. _______________________________________________ Fedora-package-review mailing list Fedora-package-review@xxxxxxxxxx http://www.redhat.com/mailman/listinfo/fedora-package-review