[rt-users] Web Interface Doesn't Work

[Jesse]

Webrt.cgi wasn't suid by default?

On Fri, Mar 10, 2000 at 06:33:07AM -0800, Steve Isaacs wrote:
> Barnett Hsu wrote:
> > 
> > At 10:10 AM 3/9/2000 -0500, you wrote:
> > >That sounds like a permissions problem.  Either some parent of reqtrack
> > >isn't readable
> > >by nobody or webrt.cgi has lost its setuidness
> > 
> > Ok. It looks like it was a permissions problem.
> > I had to change the permissions on /usr/local/reqtrack/etc
> > itself to be world read/execute.  All of the parents of
> > that directory were already world read/execute.  After
> > changing the permissions, the web interface appeared in
> > my browser.
> 
> Actually, I found on my system that I needed to change permissions to
> allow SUID (chmod +s ... ). In my opinion this slightly more secure than
> allowing world read and execute access. I believe this was required
> because Apache runs as wwwrun.nogroup and rt was attempting to change to
> a different user which caused a permissions failure in absence of the
> SUID attribute.
> 
> Steve
> 
> 
> _______________________________________________
> rt-users mailing list
> rt-users at lists.fsck.com
> http://lists.fsck.com/mailman/listinfo/rt-users
> 

-- 
jesse reed vincent -- jrvincent at wesleyan.edu -- jesse at fsck.com 
pgp keyprint:  50 41 9C 03 D0 BC BC C8 2C B9 77 26 6F E1 EB 91
--------------------------------------------------------------
. . . when not in doubt, get in doubt.  -- Old Discordian Proveb