[TYPO3-linux] Help Help Help. safe_mode and ImageMagick: do theywork together?

[mario]

hi,

thanks for the reply.

On Thu, 2006-01-12 at 12:09 +0100, Raphael GEYER wrote:
> hi Mario,
> 
> Did you already have a look at Kasper's doc Installation and Upgrade of 
> TYPO3 where he gives he's experience about mixing groups to solve this ?
> May this could help.

yes, although he considers a sligthly (?) different case (safe_mode=On,
instead of safe_mode=Off and disable_functions=exec,system,passthru.)

It seems to me that his suggestion boils down to chown typo3 files to
whoever is the web server as a user (apache in my case). 

A second thought: is there a deep difference between, on the one hand,
safe_mode=On and safe_mode_exec_dir=my_Typo3_dir`s and, on the other
hand, safe_mode=Off and disable_functions=exec,system,passthru? If so,
which setting is safer?
 
Also, in the latter case, is it possible to let maybe a single script to
call exec? (I know, these are a general php question, but I appreciate
if somebody clarify the point to me anyway). 

thanks a lot 
regards
mario



> 
> Raphael GEYER
> http://www.ameos.com
> 
> 
> "mario" <chiari.hm at flashnet.it> a crit dans le message de news: 
> mailman.2144.1137055813.6406.typo3-linux at lists.netfielders.de...
> > hi,
> >
> > Neither I nor my ISP are able to guess how Typo3 image processing could
> > work within the setting below. Note that everything seems to work very
> > fine if exec is NOT a disable_functions. (Gd works anyway).
> >
> > Owner/Group of Typo3 files is myname/myname. Typo3 outputs files whose
> > owner/group is Apache/Apache. As far as I understand (from msg`s in the
> > mailing lists and from http://it2.php.net/features.safe_mode), this is
> > the issue. Is it so? Should I ask to chown Typo3 files to apache/apache?
> > Is it safe? Is there a different way out?
> >
> > Any advise is very welcome.
> > My best
> > mario
> >
> > --------------------------------
> >
> >
> > disable_functions   exec,  system, passthru  --  exec,  system, passthru
> > safe_mode Off -- Off
> > safe_mode_exec_dir  /usr/www/chiari/<mysitedir>/im/bin
> > -- /usr/www/chiari/<mysitedir>/im/bin
> > (All IM stuff is within this directory)
> > safe_mode_gid Off -- Off
> > safe_mode_include_dir /usr/www   -- /usr/www
> >
.....