[Vtigercrm-developers] File Permission in installation package

Holbok István holbok at gmail.com
Thu Aug 28 17:48:44 GMT 2014


Hello Prasad,

I did a fresh install using the 6.1.0 EA package. I do not know this 
what changeset number has.
The issue is still there:


With files the issue exist as well.

Kindest regards:
Istvan


üdvözlettel:

*Holbok István*

+3670-342-0900
*e-mail:* holbok at gmail.com
*SkyPe:* holboki

2014.08.27. 14:17 keltezéssel, Prasad írta:
> Check if this works: 
> http://trac.vtiger.com/cgi-bin/trac.cgi/changeset/14234
>
> *Connect with us on: *Twitter <http://twitter.com/vtigercrm> *I* 
> Facebook 
> <http://www.facebook.com/pages/vtiger/226866697333578?sk=wall> *I* 
> Blog <https://blogs.vtiger.com/>* I* Wiki 
> <http://wiki.vtiger.com/index.php/Main_Page> *I *Forums 
> <https://discussions.vtiger.com>*I* Website <https://www.vtiger.com/>
>
>
> On Wed, Aug 27, 2014 at 5:37 PM, Holbok István <holbok at gmail.com 
> <mailto:holbok at gmail.com>> wrote:
>
>     May we did not described it as clear as possible.
>     I did some screen shoots to show.
>
>     Regards:
>     Istvan
>
>
>     2014.08.27. 13:48 keltezéssel, Alan Lord (News) írta:
>>     On 27/08/14 12:33, Uma S wrote:
>>>     Hi Istvan,
>>>
>>>     I would like to dig in deep with this issue, where file
>>>     permission in
>>>     installation package in haphazard way.
>>
>>     This has been raised (by me at least) a zillion times before...
>>
>>     On a Linux (POSIX) system there are no files in the vtiger
>>     directory that EVER need to be executable. Some are actually set
>>     as 777 (rwxrwxrwx) which is a big security issue and just bad
>>     practice.
>>
>>     The config file(s) should probably be 640 (rw-r-----) so it is
>>     not readable by anyone other than the web server process or root
>>     and only writeable by the web server or root.
>>
>>     Your module installer *always* installs all files as 777. I've
>>     raised this numerous times in the past.
>>
>>     HTH
>>
>>     Al
>>
>>
>>
>>>
>>>     /sudo find /home/*user*/public_html/ -type f -exec chmod 644 {} \;
>>>     sudo find /home/*user*/public_html/ -type d -exec chmod 755 {} \;
>>>     sudo chown www-data:www-data -R /home/*user*/public_html/
>>>
>>>     (if this adjustment was not done I had got server error 500 due to
>>>     important files with chmod 777 )
>>>
>>>     In my case the user was the ubuntu user.
>>>
>>>     /
>>>     /By the way, in the vtiger install zip and in the SVN the file
>>>     access
>>>     setup in full confusion. Some of files in chmod 644, some of
>>>     files in
>>>     chmod 777 and the directories are also in different and
>>>     illogical mix. /
>>>
>>>     Could you please elaborate on this issue. So which will shed
>>>     more light
>>>     on this. While installing how are you configuring permission for
>>>     files?
>>>     And what's your expectation about permissions.
>>>
>>>     -- 
>>>     With
>>>     Best Regards
>>>     Uma.S
>>>     Vtiger Team
>>>
>>>
>>>     _______________________________________________
>>>     http://www.vtiger.com/
>>>
>>
>>
>
>
>     _______________________________________________
>     http://www.vtiger.com/
>
>


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.vtigercrm.com/pipermail/vtigercrm-developers/attachments/20140828/6c095978/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: permissions.png
Type: image/png
Size: 90385 bytes
Desc: not available
URL: <http://lists.vtigercrm.com/pipermail/vtigercrm-developers/attachments/20140828/6c095978/attachment-0001.png>


More information about the vtigercrm-developers mailing list