[ic] IC 5.6.0 only working with socketperms 666

[Peter]

On 09/03/2008 06:17 AM, Davor Ocelic wrote:
> On Wed, 3 Sep 2008 13:21:27 +0100
> "IC" <ic at tvcables.co.uk> wrote:
> 
>> Hi folks,
>>
>> Just installed a new 5.6.0 to /usr/local/interchange
>>
>> The process is running fine with user interch.
>>
>> I have made a foundation catalog at /home/user/catalogs/catalog with
>> catalog user called user.

Do you have an existing Foundation catalog you're trying to get working? 
  You should be using the Standard demo for new sites with IC 5.6.0.

>> I can only get it to work with SocketPerms set to 666, I know this is
>> a permissions problem but I cannot get it going.
>>
>> I have tried various combinations of user and group on the link
>> program in the cgi-bin to no avail.
> 
> By default, IC socket file is owned by user who is running Interchange,
> and is chmod 600.
> 
> All you have to do is make the cgi link program run as that user.
> 
> So, if it's a vhost, you can define User and Group options in apache
> config, and then the link program will run as that user.
> 
> If it's not, you can use Apache's suexec, and chown link program to
> Interchange, and set suid bit on it. But read more on suexec on apache
> documentation pages, because it has a whole set of rules before it
> will suid the program.

You can use suid or apache's suexec, not both.  I suggest chown the link 
to interch.interch and *then* chmod it to 4755.  Don't worry about 
suexec unless you have already installed it in apache and know how it 
works it's best to leave it out of the equation.

Peter