Menu

#14 permissions on web tree are too restrictive

v0.4.0
open
6
2006-09-13
2006-09-13
JT Moree
No

>WHY is the web tree for the portal NOT readable by
anyone other than root?

>> I never had a need for it to be world readable so I
didn't make it. This way if you are putting passwords
or something in files there only the webuser would be
able to see them.

>well, that's kinda silly. who is going to do that?
secondly, it is causing problems bc the postgres user
CANT read the files needed to create databases. and
due to the more secure setup usind sudo and just the fact
that there are multiple versions of pg installed this
has become a big deal. Again, I am working around it
but I recommend the change.

>>Shouldn't you be running as root, or is this a xiwa
upgrade/install issue?

> No I cant run as root. there is no root user. sudo
is being used but that's not the point. postgres and
the portal user are the users who actually do the
database work--NOT root. so running as root does NOT
fix the problem.

At the very least the database files in the web tree
need to be world readable.

Discussion


Log in to post a comment.

MongoDB Logo MongoDB