Re: Permissions

On Mon, Aug 30, 2004 at 12:44:14PM +0200, Thomas Waldmann wrote:
> >I am cleaning up the Gentoo ebuild for moinmoin, and I have a quick 
> >question I hope you can help me with. What files does the httpd need 
> >write access to? Right now I'm doing the equivalent of chown -R 
> >apache:apache * , and I'd really like something cleaner. 
> 
> Additionally to what Florian already said, try to do it without giving 
> world access to data/ - there are critical informations inside there 
> like ACL protected pages and user accounts, so they shouldnt be readable 
> to everybody on FS level.

Gentoo uses webapp-config [1][2] to install web applications. Files that the webserver needs write access to are processed by webapp_serverowned(), which installs them with user-specified permissions, and always writeable by the httpd (apache:apache in the most common case). Thus, our users can set permissions on data/ according to their needs.

Best,


[1] http://dev.gentoo.org/~rl03/webapp-config.html
[2] http://dev.gentoo.org/~rl03/webapp.eclass.html
-- 
Renat Lumpau
Gentoo developer
GPG key id #C6A838DA on http://pgp.mit.edu
Key fingerprint = 04AF B5EE 17CB 1000 DDA5  D3FC 1338 ADC2 C6A8 38DA

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)

iD8DBQFBM2g1EzitwsaoONoRAvrMAJ0UX45J5YWfo0/NrsLr1mo7dQa3HACfUyGc
cZ/KZfk4ZoPLGvl/Ys5rLAw=
=23yE
-----END PGP SIGNATURE-----