Hi, I am installing ZOPE-2.4.1 on linux (Redhat 7.0) After installation ,when i start zope i get a permission denied error. Details are listed below as on console :- *************************************************************************************************** [root@EP Zope2.4.1]# ./start -P 163.122.12.10:8000 ------ 2001-10-17T14:37:13 INFO(0) ZServer HTTP server started at Wed Oct 17 20:07:13 2001 Hostname: 163.122.12.10 Port: 8080 ------ 2001-10-17T14:37:13 INFO(0) ZServer FTP server started at Wed Oct 17 20:07:13 2001 Hostname: EP.tatainfotech.com Port: 8021 ------ 2001-10-17T14:37:13 INFO(0) ZServer PCGI Server started at Wed Oct 17 20:07:13 2001 Unix socket: /home/ep/zope/Zope2.4.1/var/pcgi.soc ------ 2001-10-17T14:37:13 PANIC(300) z2 Startup exception Traceback (innermost last): File /home/ep/zope/Zope2.4.1/z2.py, line 757, in ? IOError: [Errno 13] Permission denied: '/home/ep/zope/Zope2.4.1/var/Z2.pid' *************************************************************************************************** Although , the output says that the server has started ,but actually it has not (I checked that on the browser). I have given all the required read & write permissions to the /var directory and all files in it. But that does not help and still gives the above errors. It would be of great help if u could help me solve this. Regards, R.Girish, Associate Systems Engineer, Tata Infotech Ltd, ITPL,Bangalore-560066.
On Wednesday 17 October 2001 03:42 pm, girish wrote:
File /home/ep/zope/Zope2.4.1/z2.py, line 757, in ? IOError: [Errno 13] Permission denied: '/home/ep/zope/Zope2.4.1/var/Z2.pid'
***************************************************************************
if you started zope as root, zope will then operate as nobody. make sure nobody has access/permission to the zope tree hth
bak (kedai) wrote:
On Wednesday 17 October 2001 03:42 pm, girish wrote:
File /home/ep/zope/Zope2.4.1/z2.py, line 757, in ? IOError: [Errno 13] Permission denied: '/home/ep/zope/Zope2.4.1/var/Z2.pid'
***************************************************************************
if you started zope as root, zope will then operate as nobody. make sure nobody has access/permission to the zope tree
Please, everyone, DON'T run Zope as nobody, if you value anything in the Data.fs! Recall that nobody is an unprivileged OS username. You want nobody to not have access to anything that might be considered a privileged resource. Data.fs is a bad choice to give nobody access to. If ANY system service that you have that runs as nobody (CGIs often do, for example) is compromised, your entire Data.fs becomes fair game for the compromiser. Your acl_users is in Data.fs, and it's real easy to pull the passwords out of there, or any other content. Make a new user explicitly for running Zope. Give that user rights to the Zope tree. Or, better yet, use INSTANCE_HOME (see <http://www.zope.org/Members/4am/instancehome>), and give the user rights only to the instance tree. That's how the OpenBSD zope port (coming in 3.0) operates. -- Matt Behrens <matt.behrens@kohler.com> System Analyst, Baker Furniture
participants (3)
-
bak -
Behrens Matt - Grand Rapids -
girish