Re: [Zope] installation security best practice question

2006-03-14 Thread Jens Vagelpohl
Currently i am installing zope as root and then logging in as a user and making an instance. When i go to run the zope instance as the user its says i do not have the permissions to run the files. If i change the permissions on the zope folder so that everyone has all permissions then it

Re: [Zope] installation security best practice question

2006-03-14 Thread JulianRead
I have tried this method i have made a zope instance as a dedicated user the owner of this file is that of the dedicated user. when i go to run zope as this user i get an error message saying that there is an error opening a file in the install directory ( not the zope instance) if i change

Re: [Zope] installation security best practice question

2006-03-14 Thread Jens Vagelpohl
On 14 Mar 2006, at 12:31, JulianRead wrote: I have tried this method i have made a zope instance as a dedicated user the owner of this file is that of the dedicated user. when i go to run zope as this user i get an error message saying that there is an error opening a file in the

Re: [Zope] installation security best practice question

2006-03-14 Thread Luca Olivetti
En/na Jens Vagelpohl ha escrit: The best way to install and run Zope is to have a dedicated user account and install and run it as that user. Most everything else will lead to problems and frustration. Only because the zope-2.8.6 tarball has wrong permissions. It worked before, it will work

Re: [Zope] installation security best practice question

2006-03-14 Thread Jens Vagelpohl
On 14 Mar 2006, at 14:09, Luca Olivetti wrote: En/na Jens Vagelpohl ha escrit: The best way to install and run Zope is to have a dedicated user account and install and run it as that user. Most everything else will lead to problems and frustration. Only because the zope-2.8.6 tarball

Re: [Zope] installation security best practice question

2006-03-14 Thread Luca Olivetti
En/na Jens Vagelpohl ha escrit: On 14 Mar 2006, at 14:09, Luca Olivetti wrote: En/na Jens Vagelpohl ha escrit: The best way to install and run Zope is to have a dedicated user account and install and run it as that user. Most everything else will lead to problems and frustration. Only

Re: [Zope] installation security best practice question

2006-03-14 Thread Jens Vagelpohl
On 14 Mar 2006, at 15:13, Luca Olivetti wrote: Unless you install software that lets users write to the file system through the web people cannot get to the filesystem. I usually install zope as root to /usr/local, then setup (or actually use the already set up) instances for two different

Re: [Zope] installation security best practice question

2006-03-14 Thread Luca Olivetti
En/na Jens Vagelpohl ha escrit: On 14 Mar 2006, at 15:13, Luca Olivetti wrote: [...] the same user, since I don't want to duplicate the zope installation, only the instance, and that should be possible (in fact it has been until now) without compromising security. My point was that the