Added security advice to INSTALL.mir concerning readability of log files

containing password information.

diff --git a/doc/INSTALL.mir b/doc/INSTALL.mir
index 9dceaf4..e2174ca 100755 (executable)
--- a/doc/INSTALL.mir
+++ b/doc/INSTALL.mir
@@ -78,7 +78,11 @@ as user postgres:
 
 11. Set permissions
        We provide a script that sets all files' and direcories' permissions to
-       a quite reasonable state.
+       a quite reasonable state. The most important thing you have to do after
+    the invokation of this script is to ensure that the log files --
+    especially dbentity.log -- are not readable by users that could
+    compromise system security, because all passwords and the like will
+    be logged here.
        
        cp perms.sh-dist perms.sh
        # Now, change the install directory and group in perms.sh
@@ -86,6 +90,8 @@ as user postgres:
        ./perms.sh
 
 
+
+
 12. restart tomcat 
 
 13. configure mod_jk