Topic: SME 5.5 U2 Squirrel

[gbl]

After installing SquirrelMail downloaded from http://www.e-smith.org/contrib/rpm-index/RPM-e-smith-squirrelmail-0.1-2.noarch.html
I don´t have permissions to access the http://192.168.1.1/server-manager. In my webbrowser i become following error:

Forbidden

You don't have permission to access /server-manager/ on this server.

Accessing with lynx the error is the same.

What can I do?

[Bob Todd]

chown www:www the folder and its contents u installed into and
chmod 770 the access rights for all the files --- I think that should do it

[Charlie Brady]

Bob Todd wrote:
>
> chown www:www the folder and its contents u installed into and
> chmod 770 the access rights for all the files --- I think
> that should do it

That's insecure. You don't want the "www' user to be able to modify application code files. If it can, then any web application could change the behaviour of any other web application - either because it is written to do so, or because it has a flaw that a user can exploit.
Not good in either case. You probably want root.www 750 or root.root 555.

Charlie

[gbl]

Thanks for aour assistance.

Thr rpm has changed the rights in /etc/e-smith/web/panels.
After running chmod 777 panels, I can access the server-manager again.

[Charlie Brady]

gbl wrote:

> Thr rpm has changed the rights in /etc/e-smith/web/panels.
> After running chmod 777 panels, I can access the
> server-manager again.

The correct permissions for that directory are root.admin, 550.

But you can reset the permissions without knowing that by running:

rpm --setperms -qf /etc/e-smith/web/panels

Charlie

[gbl]

Thanks for your advise.