Index: INSTALL.txt =================================================================== RCS file: /cvs/drupal/drupal/INSTALL.txt,v retrieving revision 1.59 diff -u -p -r1.59 INSTALL.txt --- INSTALL.txt 25 Jan 2008 21:17:50 -0000 1.59 +++ INSTALL.txt 28 Jan 2008 01:14:57 -0000 @@ -136,7 +136,7 @@ INSTALLATION running FastCGI can run into problems if the $base_url variable is left commented out (see http://bugs.php.net/bug.php?id=19656). -6. REVIEW FILE SYSTEM STORAGE SETTINGS +6. REVIEW FILE SYSTEM STORAGE SETTINGS AND FILE PERMISSIONS The files directory created in step 4 is the default file system path used to store all uploaded files, as well as some temporary files created by Drupal. @@ -181,6 +181,17 @@ INSTALLATION unexpected problems on an existing site. If you modify the file system path on an existing site, remember to copy all files from the original location to the new location. + + Some administrators suggest making the documentation files, especially + CHANGELOG.txt, non-readable so that the exact version of Drupal you are + running is concealed. This will have little actual benefit to your site's + security. However, if you wish. you may use the following command from a + shell or system prompt (while in the installation directory): + + chmod a-r CHANGELOG.txt + + For more information see a "Brief intro to Unix file permissions" + (http://drupal.org/node/34023). 7. CRON MAINTENANCE TASKS