Topic: Folder permissions in iBays

[Daniel B.]

If you want full control on filesystem permission (and other settings), don't use ibay. Install your app manually in /opt/myapp or /home/e-smith/files/myapp, create the custom-template for httpd.conf. Ibays are made to have something simple and working. You can't conciliate simple to use and full control.

[michelandre]

Hi Stefano,

Making umask consistent with the creation of the i-bay will take out group w and you will not be able to install WordPress as it is needed for the primary installation.

The only suggestion will be to install WordPress in any i-bay except Primary.

SME is very well done and secure and I think there is a reason for having shared as the Primary's group.

Michel-André

[michelandre]

Hi Daniel B,

The security problem is not with SME but with WordPress.   

Michel-André

[Jean-Philippe Pialasse]

If you want full control on filesystem permission (and other settings), don't use ibay. Install your app manually in /opt/myapp or /home/e-smith/files/myapp, create the custom-template for httpd.conf. Ibays are made to have something simple and working. You can't conciliate simple to use and full control.

this should not be in opt as it will not be included in the standard backup process, so you should rather /home/e-smith/files/myapp or /home/e-smith/files/webapps/myapp.

[mmccarn]

For what it's worth, I make these changes to ibay settings for ibays that contain Wordpress:

Code: [Select]

# set IBAY manually, or replace it in this command with your ibay name
#
/sbin/e-smith/db accounts setprop $IBAY \
FollowSymLinks enabled \
CgiBin enabled \
AllowOverride All \
Group www \
PublicAccess global \
UserAccess wr-group-rd-everyone \
PHPBaseDir /home/e-smith/files/ibays/$IBAY/:/tmp/
#
signal-event remoteaccess-update

My notes on this say:

# Set AllowOverride, FollowSymlinks, Group, UserAccess and PHPBaseDir so that
# permalinks and uploads will work