Config.php security

[kaeldaven]

I have version 3.2 but I'm pretty sure this has nothing to do with it so I'm posting it in general. I've finished with my site now, installed and everything seems to be working fine except I get a flashing red box in Admin that says that include/config.php still has writable attribs. I set it from 777, to 655 and even 555 after install but no matter what I do it still says it's writable and that it is a major security risk, I'm a little concerned at this point but I don't know what it is reading, is there anything I could POSSIBLY be missing that I"m just overlooking with my Red BULL High right now?

[James]

Set it to 444 :)

[kaeldaven]

Content visible to registered users only.

Unfortunately that doesn't do anything, and get this when I go back into the directory, somehow it's back to 655, its as if the problem is somehow changing it, BUT I did go to /admin and swtich the setting on to override security messages on your admin page. I'm still a little concerned but at least I don't have it glaring me in the face anymore.

[David]

The ONLY way to set to 444 is through the file manager in cpanel.

[kaeldaven]

Well let me ask this, is 644 really a security threat?

[James]

nope but if you want the warning to go away you have to set it to 444 it is a Cpanel thing and that is just the way it is.