Closed (works as designed)
Project:
Hostmaster (Aegir)
Version:
7.x-3.x-dev
Component:
Code
Priority:
Normal
Category:
Support request
Assigned:
Unassigned
Reporter:
Created:
22 Mar 2016 at 12:54 UTC
Updated:
20 Jun 2016 at 21:06 UTC
Jump to comment: Most recent
Comments
Comment #2
jon pughFor some reason, Aegir stores tons of metadata about your site's modules in this drushrc.php file.
I really don't know why. Perhaps we should look at cleaning this file up, unless there is a really good reason for having this data in there that I'm just not aware of.
Comment #3
ergonlogicThe short answer is "no".
drushrc.phpfiles ought never be served via the webserver to begin with. They contain DB credentials, so that commands likedrush @example.com sqlcwork. As a result, they should be owned byaegir:aegirand have mode0440, i.e., only readable by the aegir user.The
$options['packages']array, which makes up by far the majority of these files, contains a listing of all the modules, themes, etc. on the site, along with meta-data about them (e.g., versions, etc.) This is rebuilt on each 'verify' task, and passed back to the front-end, to populate the 'Packages' tables that, in turn, are used to compare platforms, flag warnings and errors, if modules have been removed, are being downgraded, etc.