On Tue, May 15, 2007 at 01:49:47PM -0400, Sean Brown wrote:
> On 5/15/07, Steven Garcia <[EMAIL PROTECTED]> wrote:
> > That did the trick!
> >
> > I was worried about security risks, but if you say 777 is okay then I
> > will run with it
> 
> No, no,no.  777 is not OK.  That will open your site to Very Bad
> Things (tm).  Jens was saying that the user running your app needs to
> have write access.  You should figure out what user is running your
> app (mongrel?, lighty?, etc.) and make sure to give that user (only)
> write access.

Full ACK, the 777 was only the short way of checking if it is a
permissions problem in the first place.

In addition to what Sean wrote above - if you're running the DRb server
it's this process that needs write access, not your mongrels (as they
will only talk to the DRb server). Won't matter if you use the same user
for mongrels and DRb, though. So once you know the user, give him write
permissions and revert the permissions to something more restrictive
again.


Jens

 

-- 
Jens Krämer
webit! Gesellschaft für neue Medien mbH
Schnorrstraße 76 | 01069 Dresden
Telefon +49 351 46766-0 | Telefax +49 351 46766-66
[EMAIL PROTECTED] | www.webit.de
 
Amtsgericht Dresden | HRB 15422
GF Sven Haubold, Hagen Malessa
_______________________________________________
Ferret-talk mailing list
[email protected]
http://rubyforge.org/mailman/listinfo/ferret-talk

Reply via email to