[Typo3-linux] Owner/Group settings in typo3_src and dummy packages

Michael Stucki mundaun at gmx.ch
Wed May 21 12:54:25 CEST 2003


Karsten Dambekalns wrote:

> Well, on a lot of systems, 'anonymous users' like FTP or accounts that
> need some group but should get as little privileges as possible are in
> nobody as well.

> If those 'document root' files belong to group nobody, and are writable
> (something we need for TYPO3), this opens the door to hacking websites
> wide open.

That's the point!

> I think having a seperate group for Apache (as done in Debian) is a Good
> Thing!

Full ACK! Don't know why other distributors didn't separate that yet...

Cheers - michael



More information about the TYPO3-linux mailing list