[ic] Definite permission problems with Debian Install

John Foster interchange-users@interchange.redhat.com
Mon Apr 15 11:19:01 2002


Should the IC user in Debian be www-data or the catalog owner? I finally
got a catalog to run from the Debian installation system dselect. I did
this by having the IC software installed by root (as required in Debian)
with the IC server owned & run as a regular user, one with access to
administer postgresql etc. I also set the foundation catalog to use this
same user as owner. To get this all to work I had to change the
permissions to 0755 on virtuall all of the parts of the IC system. This
is a real security problem. I also ahd to change the permissions on
/usr/lib/cgi-bin recursive to 0777 thus creating an even bigger problem.
Now I can change all these back after I get the system running but this
seems to be just not right to begin with. I also still am unable to get
the admin-ui to allow the catalog owner to access it. I get a permission
denied message from the https server. I also have tried to install about
10 catalogs using makecat and none of them will work properly, images
and access seems to be messed up. I seem to remember from some previous
debian attempts thet I need to somehow allow the apache server to be the
IC user as www-data, hence my first question. Thanks.
-- 
John Foster