Yes, updated instructions in readme will be enough. Also note that 
otrs.SetPermissions.pl will not work on Debian as expected (and why) would by 
fine...

 

Thanks,

Radim

From: Patrick Matthäi [mailto:[email protected]] 
Sent: Tuesday, October 09, 2018 11:39 AM
To: Stoklasa Radim <[email protected]>; [email protected]
Subject: Re: Bug#909160: Still outdated example for otrs.SetPermissions.pl in 
README.Debian

 

Am 27.09.2018 um 01:03 schrieb Stoklasa Radim:



2) Running otrs.SetPermissions.pl won't enable usage of buildin package
manager as advised in readme.
Script otrs.SetPermissions.pl refuses to follow symlinks (by design), so
content of directory /usr/share/otrs/var/ (pointing to /var/lib/otrs/) won't
get correct permissions. Therefore packages can't be correctly installed
from web interface (by www-data user). In my case, I had to change
permissions by hand on otrs/var/ tree.
Maybe providing patched version of otrs.SetPermissions.pl in Debian package
may solve this issue (I'm not familiar with perl, so I'm not able to provide
patch).


IMO changing the script to following symlinks will open security holes. So I 
think it is better to change the instructions to use chown/chmod in 
/var/lib/otrs and /usr/share/otrs to change the group to www-data?



-- 
/*
Mit freundlichem Gruß / With kind regards,
 Patrick Matthäi
 GNU/Linux Debian Developer
 
  Blog: http://www.linux-dev.org/
E-Mail: [email protected] <mailto:[email protected]> 
        [email protected] <mailto:[email protected]> 
*/

Reply via email to