-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
Hello all, My name is Chuck and I am new to the list. I have already posted this to debian-mentors but was advised to post here as well. I am currently working on building a package based on the ClusterLabs Hawk web GUI. Thanks to the people in #debian-mentors I have most of the package complete. It works perfectly in Squeeze and I will be starting builds for Wheezy today or tomorrow. However, I still have 1 problem. This package controls entire clusters (corosync, pacemaker, et al) and thus is designed with directory rights of 0700 for user hacluster (user used to run corosync). The problem is that 0700 directories are against policy in /usr/share. However, lighttpd is the delivery agent for the package and such apps (phpmyadmin and other web gui's) are usually installed in /usr/share. If I set the directories at 755 then there is the possibility that any service/script could execute files in the directory and thus control the cluster. I had considered moving it all to /var/lib but that doesn't seem to be correct to me. Is there a better location for the install where I can actually set 0700 permissions? Thanks for your comments and ideas, Charles Williams -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with undefined - http://www.enigmail.net/ iEYEARECAAYFAlEY38sACgkQIUUjp07y+ZZ3FQCfb0YVQkX/BbWCZePnVWSlnsDu nNgAoMRN5ldgPXTPc1mVx34ka3UzjV+U =lS4e -----END PGP SIGNATURE----- -- To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/5118dfcb.1030...@itadmins.net
