| 
      
      
      From: Chris W. <ch...@cw...> - 2002-03-12 04:27:29
      
     | 
| On Mon, 2002-03-11 at 14:15, Magnus Espeland wrote: > I finally figured out what was wrong, thanks to your tips :-) > > My problem was that I'm using Trustix (the redhat based distribution with > focus on security), for the first time in a year and a half, and had > forgotten how secure it really is.. problem was that both cpan and > oi_manage ran with a umask of 077. Took me a while to figure out that cpan > didn't change the umask. > > But now everything is working! > I have a little wish list though ;-) > - Could you make oi_manage change it's umask when we run it? Maybe it's > best to make it an option? Ah, I'll bet that was fun to debug! Maybe it would be a good idea instead to create wrappers on your system that do something like: -----/usr/local/bin/cpan----- #!/bin/sh umask 022 perl -MCPAN -e shell ---------- (rename oi_manage to oi_manage.pl) -----/usr/local/bin/oi_manage----- #!/bin/sh umask 022 perl /usr/local/bin/oi_manage $* ---------- Since this is the first time this has popped up, I'd rather not put this sort of stuff (security) into OI if I can help it. > - ApacheStartup.pm or Startup.pm creates tmplib, it should check it's > uid/gid and umask. My apache runs as uid/gid=httpd but the tmplib dir > shows up with 700 root.root, and that doesn't work very well ;-) I just > hacked the module to change umask one line before it creates the > directory, but I reckon it should be done elsewhere and a little more > though-thru... Excellent point. I'll check that and ensure that the umask allows at least read access by everyone. > - Could you make oi_manage understand relative --website_dir (like > --website_dir=.)? That's a good idea. I'll put this down to check as well. > Bugs: > - Typo at line 15 in event-1.20/struct/event.sql (varchar not varcar) Fixed in CVS! Thanks. Chris -- Chris Winters (ch...@cw...) Building enterprise-capable snack solutions since 1988. |