Fossil SCM
Stronger recommendation for changing the default user's random hex password prior to setting up a Fossil server after learning it's 6 hex digits, not 8 as I thoght when I wrote that!
Commit
9fcd6e443cdefb5a3432a65739d3732d710a2ad73a0420203e28d4c4dc9ca255
Parent
91377ae432ed02f…
1 file changed
+3
-3
+3
-3
| --- www/server/index.html | ||
| +++ www/server/index.html | ||
| @@ -78,13 +78,13 @@ | ||
| 78 | 78 | |
| 79 | 79 | <ol> |
| 80 | 80 | <li><p>Fossil creates only one user in a <a |
| 81 | 81 | href="$ROOT/help?cmd=new">new repository</a> and gives it the <a |
| 82 | 82 | href="../admin-v-setup.md">all-powerful Setup capability</a>. (“s”) |
| 83 | - The default random password for that user is fairly strong against | |
| 84 | - remote attack, but because that user has so much power, you might want | |
| 85 | - to give it an even stronger password under Admin → Users.</a></li> | |
| 83 | + The 6-digit random hex password generated for that user is not very strong against | |
| 84 | + remote attack, so because that user has so much power, you should | |
| 85 | + give it a much stronger password under Admin → Users.</a></li> | |
| 86 | 86 | |
| 87 | 87 | <li><p>Run the Admin → Security-Audit tool to verify that other |
| 88 | 88 | security-related permissions and settings are as you want them. |
| 89 | 89 | Consider clicking the “Take it private” link on that page to lock down |
| 90 | 90 | the security on that site to a level appropriate to a private |
| 91 | 91 |
| --- www/server/index.html | |
| +++ www/server/index.html | |
| @@ -78,13 +78,13 @@ | |
| 78 | |
| 79 | <ol> |
| 80 | <li><p>Fossil creates only one user in a <a |
| 81 | href="$ROOT/help?cmd=new">new repository</a> and gives it the <a |
| 82 | href="../admin-v-setup.md">all-powerful Setup capability</a>. (“s”) |
| 83 | The default random password for that user is fairly strong against |
| 84 | remote attack, but because that user has so much power, you might want |
| 85 | to give it an even stronger password under Admin → Users.</a></li> |
| 86 | |
| 87 | <li><p>Run the Admin → Security-Audit tool to verify that other |
| 88 | security-related permissions and settings are as you want them. |
| 89 | Consider clicking the “Take it private” link on that page to lock down |
| 90 | the security on that site to a level appropriate to a private |
| 91 |
| --- www/server/index.html | |
| +++ www/server/index.html | |
| @@ -78,13 +78,13 @@ | |
| 78 | |
| 79 | <ol> |
| 80 | <li><p>Fossil creates only one user in a <a |
| 81 | href="$ROOT/help?cmd=new">new repository</a> and gives it the <a |
| 82 | href="../admin-v-setup.md">all-powerful Setup capability</a>. (“s”) |
| 83 | The 6-digit random hex password generated for that user is not very strong against |
| 84 | remote attack, so because that user has so much power, you should |
| 85 | give it a much stronger password under Admin → Users.</a></li> |
| 86 | |
| 87 | <li><p>Run the Admin → Security-Audit tool to verify that other |
| 88 | security-related permissions and settings are as you want them. |
| 89 | Consider clicking the “Take it private” link on that page to lock down |
| 90 | the security on that site to a level appropriate to a private |
| 91 |