[Tikiwiki-users] Fwd: [Tiki-devel] why would setup.sh set directories globally writable?

[Marc L. <ma...@ma...>]

For the record:


---------- Forwarded message ----------
From: Alexander Mette <ma...@am...>
Date: Thu, Oct 4, 2012 at 2:03 PM
Subject: Re: [Tiki-devel] [Tikiwiki-users] why would setup.sh set
directories globally writable?
To: Tiki developers <tik...@li...>


It should only happen, when you are

        * not root
AND
        * not in the group of the webserver

greets
amette

On 04/10/12 20:01, Jonny Bradley wrote:
>
> Didn't we fix this in 9.x? (i say "we", Changi and/or Jyhem did it i think)
>
> jb
>
>
> On 4 Oct 2012, at 18:26, Marc Laporte wrote:
>
>> This is more a message for developers, so forwarding to the developers
>> mailing list.
>>
>> Tks
>>
>>
>> On Mon, Aug 6, 2012 at 11:41 AM, Nick <oin...@le...> wrote:
>>> Hi,
>>>
>>> I've noticed that the setup.sh script for tiki 9.0 sets certain directories
>>> globally writable.  Surely a mistake?  I really don't want to set *any* of my
>>> installation's directories globally readable on a shared host.
>>>
>>> To reproduce, run:
>>>
>>>  sh -x setups.sh -u xxxx -g yyyy -n 2>&1 | grep -C 1 'go+w'
>>>
>>> (Replacing xxxx and yyyy with your appropriate user and group name.)
>>>
>>> I get:
>>>
>>> Fix special dirs ...+ '[' xxxx = root ']'
>>> + chmod -fR go+w db dump img/wiki img/wiki_up img/trackers modules/cache temp
>>> temp/cache temp/public templates_c templates styles maps whelp mods files
>>> tiki_tests/tests temp/unified-index
>>> + echo ' done.'
>>>
>>> N
>>>
>>> ------------------------------------------------------------------------------
>>> Live Security Virtual Conference
>>> Exclusive live event will cover all the ways today's security and
>>> threat landscape has changed and how IT managers can respond. Discussions
>>> will include endpoint security, mobile security and the latest in malware
>>> threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
>>> _______________________________________________
>>> TikiWiki-users mailing list
>>> Tik...@li...
>>> https://lists.sourceforge.net/lists/listinfo/tikiwiki-users
>>
>>
>>
>> --
>> Marc Laporte
>>
>> http://MarcLaporte.com
>> http://Tiki.org/MarcLaporte
>> http://AvanTech.net
>>
>> ------------------------------------------------------------------------------
>> Don't let slow site performance ruin your business. Deploy New Relic APM
>> Deploy New Relic app performance management and know exactly
>> what is happening inside your Ruby, Python, PHP, Java, and .NET app
>> Try New Relic at no cost today and get our sweet Data Nerd shirt too!
>> http://p.sf.net/sfu/newrelic-dev2dev
>> _______________________________________________
>> TikiWiki-devel mailing list
>> Tik...@li...
>> https://lists.sourceforge.net/lists/listinfo/tikiwiki-devel
>>
>
>
> ------------------------------------------------------------------------------
> Don't let slow site performance ruin your business. Deploy New Relic APM
> Deploy New Relic app performance management and know exactly
> what is happening inside your Ruby, Python, PHP, Java, and .NET app
> Try New Relic at no cost today and get our sweet Data Nerd shirt too!
> http://p.sf.net/sfu/newrelic-dev2dev
> _______________________________________________
> TikiWiki-devel mailing list
> Tik...@li...
> https://lists.sourceforge.net/lists/listinfo/tikiwiki-devel


--
http://amette.eu
ma...@am...

------------------------------------------------------------------------------
Don't let slow site performance ruin your business. Deploy New Relic APM
Deploy New Relic app performance management and know exactly
what is happening inside your Ruby, Python, PHP, Java, and .NET app
Try New Relic at no cost today and get our sweet Data Nerd shirt too!
http://p.sf.net/sfu/newrelic-dev2dev
_______________________________________________
TikiWiki-devel mailing list
Tik...@li...
https://lists.sourceforge.net/lists/listinfo/tikiwiki-devel


-- 
Marc Laporte

http://MarcLaporte.com
http://Tiki.org/MarcLaporte
http://AvanTech.net