diff options
| author | ivan <ivan> | 1998-12-20 02:11:31 +0000 |
|---|---|---|
| committer | ivan <ivan> | 1998-12-20 02:11:31 +0000 |
| commit | e10ac0a3a728f9410ae6d7b121809eb14e33c42f (patch) | |
| tree | 1dd4e1d3d3e06e53b74d3357d142e888680e95c9 /htdocs/docs/install.html | |
| parent | e03778f753c3458e669fb261a013e6c2931c2dd7 (diff) | |
suggest suEXEC as an alternative to suidperl
Diffstat (limited to 'htdocs/docs/install.html')
| -rw-r--r-- | htdocs/docs/install.html | 9 |
1 files changed, 8 insertions, 1 deletions
diff --git a/htdocs/docs/install.html b/htdocs/docs/install.html index 058a60a1e..5d00f9641 100644 --- a/htdocs/docs/install.html +++ b/htdocs/docs/install.html @@ -40,10 +40,17 @@ cp fs-x.y.z/site_perl/* /usr/local/lib/site_perl/FS</pre> or <pre>ln -s /full/pa cp -r fs-x.y.z/htdocs/* /usr/local/apache/htdocs/freeside</pre> or <pre>ln -s /full/path/to/fs-x.y.z/htdocs /usr/local/apache/htdocs/freeside</pre> <li>Restrict access to this web interface. (with <a href="http://www.apache.org/docs/misc/FAQ.html#user-authentication">Apache</a>) <li>Enable CGI execution for files with the `.cgi' extension. (with <a href="http://www.apache.org/docs/mod/mod_mime.html#addhandler">Apache</a>) - <li>Set ownership and permissions for the web interface. Your system should support secure setuid scripts or Perl's emulation, see <a href="http://www.perl.com/CPAN-local/doc/manual/html/pod/perlsec.html#Security_Bugs">perlsec: Security Bugs</a> for information and workarounds. + <li>Set ownership and permissions for the web interface. The web interface needs to run as the freeside user - there are several ways to do this. + <ul> + <li>Use Perl's setuid emulation: see the <a href="http://www.perl.com/CPAN-local/doc/manual/html/pod/perlsec.html#Security_Bugs">Security Bugs</a> section of the <a href="http://www.perl.com/CPAN-local/doc/manual/html/pod/perlsec.html">perlsec</a> manpage. <pre>cd /usr/local/apache/htdocs/freeside chown -R freeside . chmod 4755 browse/*.cgi edit/*.cgi edit/process/*.cgi misc/*.cgi misc/process/*.cgi search/*.cgi view/*.cgi</pre> + <li>Use Apache's <a href="http://www.apache.org/docs/suexec.html">suEXEC</a>. +<pre>cd /usr/local/apache/htdocs/freeside +chown -R freeside . +chmod 755 browse/*.cgi edit/*.cgi edit/process/*.cgi misc/*.cgi misc/process/*.cgi search/*.cgi view/*.cgi</pre> + </ul> <li>Create the necessary <a href="config.html">configuration files</a>. <li>Create the `/usr/local/etc/freeside/counters.<i>datasrc</i>', and `/usr/local/etc/freeside/export.<i>datasrc</i>' directories for each <i>datasrc</i>. |