Loading...
 
Skip to main content

fixperms.sh fix doesn't secure the linux server from allowing tikiadmins from installing Tiki Mods

Status
Closed
Subject
fixperms.sh fix doesn't secure the linux server from allowing tikiadmins from installing Tiki Mods
Version
2.x
Category
  • Support request
  • Consistency
Feature
Mods
Installer (profiles, upgrades and server-related issues)
Resolution status
Invalid
Submitted by
Xavier de Pedro
Lastmod by
Xavier de Pedro
Rating
(0)
Description

After running "./fixperms.sh fix" on the server side (Debian based, having root perms on server), and using 1.10svn code from mid May 2008, admins of the tiki site can still install mods on the server through the Tiki admini mods interface.
It used to work before (months ago, when I last used that).
our server, afaik, has www-data and www-data as user and group.
We are using a multitiki installation, with tikis under subdirectories.

I'm afraid that admins of the other tikis from the same multitiki are able to remove mods that we are using and need, etc.
...

Solution
not valid any more. fixperms.sh is not used any more but setup.sh
Importance
8
Priority
40
Demonstrate Bug on Tiki 19+
Demonstrate Bug (older Tiki versions)
Ticket ID
1813
Created
Thursday 05 June, 2008 16:35:57 UTC
by Unknown
LastModif
Wednesday 31 March, 2010 08:10:45 UTC


Show PHP error messages