[Zope] installing zope on ISPs server - in root dir, they say...

Stephan Göldi goeldi@goeldi.com
31 Jul 2002 09:47:14 +0000


Am Mit, 2002-07-31 um 03.33 schrieb Michael:
> My ISP installed Zope in /usr/local and set up an INSTANCE_HOME in my 
> personal directory.  Zope is owned by "nobody" so I had to be added to the 
> "nobody" group to be able to edit, delete etc.  We made a start script like: 

Your ISP has a serious security problem! Adding users to the nobody
group creates some opportunities ...

Stephan
http://www.zopehosting.ch