Package: gallery2
Followup-For: Bug #564561

There are two different places, where gallery2 ask for password to database:
- during installation, this is needed by install script to create
  database for gallery2 - that password doesn't
  appear in /etc/gallery2/config.php

- when gallery is configured with it's webpage - and that password goes
  to /etc/gallery2/config.php
  if someone enters here root password to database - he has security problem.
  That user should have permissions only to gallery2 database.

During install, package should  ask  for second, non admin user,
with access only to gallery2 database.

Bug can be closed in my opinion.



-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to