Some of the turbogears install docs state that the files should be installed as www-data. As someone that has done perl and php installs I struck that as a little odd.
As an experiment, I installed the files as another user, specific to the project. Care needs to be taken so that some directories are able to be written by www-data, such as the cache and data files (depending what happens). This seems to work fine and I'd argue its probably more secure. If the directories and files are owned by user blah, then the apache process running as www-data cannot change them (assuming no chmod 777 insanity going on) as the underlying Linux OS won't let it. I would think this is a good thing. Is there some reason why installing the files as www-data was chosen? - Craig -- Craig Small VK2XLZ http://enc.com.au/ csmall at : enc.com.au Debian GNU/Linux http://www.debian.org/ csmall at : debian.org GPG fingerprint: 5D2F B320 B825 D939 04D2 0519 3938 F96B DF50 FEA5 -- You received this message because you are subscribed to the Google Groups "TurboGears" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at http://groups.google.com/group/turbogears. For more options, visit https://groups.google.com/groups/opt_out.
