Re: [Lurker-users] buildling cvs

[Wesley W. T. <we...@te...>]

On Sat, Apr 12, 2003 at 05:01:08PM -0400, Kevin Brosius wrote:
> For completeness, the owner of lurkerd and apache need to be able to
> write files in those directories, correct?

The user who invokes lurkerd and lurker.cgi must have access, yes.
Or else the executables must be setuid to such a user.

> On SuSE, Apache runs as uid:wwwrun,gid:nogroup.  Running lurkerd under
> it's own account was a big part of my problem.  The lurker.cgi ran with
> Apache authority, creating files under wwwrun/nogroup.  But lurkerd was
> running as lurker/users.  One of the problems I saw was failure of
> lurkerd to delete cache files, because they are created by lurker.cgi.

What I suggest is to have lurkerd run as lurker/users.
Make lurker.cgi owned by lurker/users.
Then: chmod u+s lurker.cgi
This will make the cgi run with the permissions of the lurker user without
needing to be invoked by the user... and apache can still run as root.

> Anyway, the quick workaround was to run Apache as the lurker user.  It's
> up and running now.  Thanks for the help!

Eek! Don't do that! :-)
Either make the directories world writeable, or make the lurker.cgi setuid.

> I'll be doing some testing, and wondered if the lurker-users list is
> available as an mbox file for download anywhere?  If so, I can put up a
> copy of it in lurker for people to play with.

If anyone has an mbox, it sadly isn't me.

-- 
Wesley W. Terpstra <we...@te...>