Re: [Zope] installation security best practice question

2006-03-14 Thread Luca Olivetti
En/na Jens Vagelpohl ha escrit: On 14 Mar 2006, at 15:13, Luca Olivetti wrote: [...] the same user, since I don't want to duplicate the zope installation, only the instance, and that should be possible (in fact it has been until now) without compromising security. My point was that the "sec

Re: [Zope] installation security best practice question

2006-03-14 Thread Jens Vagelpohl
On 14 Mar 2006, at 15:13, Luca Olivetti wrote: Unless you install software that lets users write to the file system through the web people cannot get to the filesystem. I usually install zope as root to /usr/local, then setup (or actually use the already set up) instances for two different

Re: [Zope] installation security best practice question

2006-03-14 Thread Luca Olivetti
En/na Jens Vagelpohl ha escrit: On 14 Mar 2006, at 14:09, Luca Olivetti wrote: En/na Jens Vagelpohl ha escrit: The best way to install and run Zope is to have a dedicated user account and install and run it as that user. Most everything else will lead to problems and frustration. Only bec

Re: [Zope] installation security best practice question

2006-03-14 Thread Jens Vagelpohl
On 14 Mar 2006, at 14:09, Luca Olivetti wrote: En/na Jens Vagelpohl ha escrit: The best way to install and run Zope is to have a dedicated user account and install and run it as that user. Most everything else will lead to problems and frustration. Only because the zope-2.8.6 tarball has

Re: [Zope] installation security best practice question

2006-03-14 Thread Luca Olivetti
En/na Jens Vagelpohl ha escrit: The best way to install and run Zope is to have a dedicated user account and install and run it as that user. Most everything else will lead to problems and frustration. Only because the zope-2.8.6 tarball has wrong permissions. It worked before, it will work

Re: [Zope] installation security best practice question

2006-03-14 Thread Jens Vagelpohl
On 14 Mar 2006, at 12:31, JulianRead wrote: I have tried this method i have made a zope instance as a dedicated user the owner of this file is that of the dedicated user. when i go to run zope as this user i get an error message saying that there is an error opening a file in the instal

Re: [Zope] installation security best practice question

2006-03-14 Thread JulianRead
I have tried this method i have made a zope instance as a dedicated user the owner of this file is that of the dedicated user. when i go to run zope as this user i get an error message saying that there is an error opening a file in the install directory ( not the zope instance) if i change th

Re: [Zope] installation security best practice question

2006-03-14 Thread Jens Vagelpohl
Currently i am installing zope as root and then logging in as a user and making an instance. When i go to run the zope instance as the user its says i do not have the permissions to run the files. If i change the permissions on the zope folder so that everyone has all permissions then it

[Zope] installation security best practice question

2006-03-14 Thread JulianRead
HI i am installing zope in on linux fedora core 3 however i am having problems when setting up the permissions. Currently i am installing zope as root and then logging in as a user and making an instance. When i go to run the zope instance as the user its says i do not have the permissions to ru