r3wp [groups: 83 posts: 189283]
  • Home
  • Script library
  • AltME Archive
  • Mailing list
  • Articles Index
  • Site search
 

World: r3wp

[Linux] group for linux REBOL users

Gabriele
3-Aug-2006
[750]
it's not rebol that can't write because of -s, it's the apache user 
not having permissions (from what you describe). generally apache 
never has write access to cgi-bin because that's a security risk. 
you can give it access to that single file (still risky) or move 
the file to /var/log for e.g. where apache keeps its other log files.
Pekr
3-Aug-2006
[751]
thanks ....
Pekr
7-Aug-2006
[752x10]
I just verified .... it is definitely problem with permissions on 
files, and I am having headache because of it already (maybe linux 
is really not for me :-)
when I run Apache and my virtual host with SuexecUserGroup jablunkovsko 
jabladm, I can't run CGI at all, and that is strange! All directories 
and files are of owner=jablunkovsko, group=jabladm, including rebpro, 
rsp.cgi
Simple commenting out Suexec directive enables me to run CGI ... 
but still not luck writing to file. My friend suggested me to add 
../db/ dir permissions of 777, to see what happens. Then yes, I can 
see %log.txt generated, owner and group is apache ....
but - log.txt is just an example. It is not option for me to have 
files I want to write to placed somewhere else, as I will/want to 
use sqlite and surely want it have accessible via ftp easily, directly 
in directory I want.
what I wonder is - why it is not enough to set chmod 666 for that 
directory? It clearly states that everybody can read and write in 
/db/ directory ....
setting it to 777 sounds possible, but kind of masochistic to me 
:-)
I also played with setuid etc. settings, to have Apache using particular 
permissions of /db/ directory, but still not luck ....
hmm, now I tried su apache, and my sestem tells me, that there is 
no such an user. Could that be a problem? That server was set-up 
for me some 3 years ago, so I don't remember properly, how it was 
configured ....
hmm, the account is there, it is just it has probably set /sbin/nologin 
in passwd ...
Hmm, I allowed for user apache to log in, I can get to each directory, 
but "cd db" returns "permission denied" - why it is so?

drwxr-sr-x  2 jablunkovsko jabladm  4096 Jan 11  2005 about
drwxr-sr-x  4 jablunkovsko jabladm  4096 Aug  7 16:04 akce
drwxr-sr-x  3 jablunkovsko jabladm  4096 Jul  3 20:03 aktuality
drwxr-xr-x  2 jablunkovsko jabladm  4096 Aug  6 19:01 cgi-bin
drwxr-sr-x  3 jablunkovsko jabladm  4096 Nov  2  2005 COD
drwxr-sr-x  5 jablunkovsko jabladm  4096 Jul  3 20:04 cyklo
drwxr-sr-x  2 jablunkovsko jabladm  4096 Aug  2 00:04 data
drw-rw-rw-  2 jablunkovsko jabladm  4096 Aug  7 14:29 db
drwxr-sr-x  4 jablunkovsko jabladm  4096 Jul  3 20:05 fotogalerie
Henrik
7-Aug-2006
[762]
setting permission to executable for a directory allows you to enter 
it
Pekr
7-Aug-2006
[763x7]
btw - what is the difference in "s" and "S"? I don't remember how 
those "s" got in there. Are those user/grup id? If I set such manually, 
I get "S", not "s".
why can I enter each other dir, but not db dir?
ah, got it ...
so to enter directory, I need to set x bit for it?
but not necessarily for files inside, right?
is setting recursively "s" option for files and diretories good to 
achieve correct user/group ids when copying via ftp? Or it is not 
necessary?
I think that I don't need those "s" bits, but before I remove it, 
I better ask :-)
Tomc
7-Aug-2006
[770]
group "s" on a dir  says that by default; all  files and dirs created 
below me will have the same  group ownership/perms that I have.
Pekr
7-Aug-2006
[771x2]
thanks ... the problem probably was, that for a directory, there 
needs to be "execute" bit set, or you can't enter it ...
and is there difference between small and capital "s"?
Tomc
7-Aug-2006
[773x2]
yes the entire path of dirs to your target  need to be executable 
to get there
lower s it the "sticky" bit for dirs to cause item under them to 
take on the same permissions and ownership
only applies to directories owner and group (but effects files)


upper case S I am not recalling off the top of my head ... applies 
to files  scriptable or sockets or something
Pekr
7-Aug-2006
[775x2]
I thought the sticky bit is T?
but I understand what you mean ...
Gabriele
7-Aug-2006
[777]
on dirs, read means you can list the contents, write means you can 
remove/add files to the dir, and execute means you can access the 
files in the dir.
Pekr
7-Aug-2006
[778x3]
what do you mean "access files in the dir"?
the strange thing was, that I was able to read directory content 
and print it to the browser, just write %../db/log.txt failed ....
and I had "write" enabled - rw-rw-rw (666) ....
Tomc
7-Aug-2006
[781]
on solaris sticky bit is 's'  i would be suprised if linux strayed 
that much
Gabriele
8-Aug-2006
[782x4]
write access means you can add files to the dir, but to write on 
them you need to be able to access files in the dir which is the 
execute bit. i think you can probably use the touch command to create 
new files on dirs with rw- (not sure though) but for complete access 
to a dir you need rwx.
to restate: with --x you can read/write a file in the dir (provided 
the file is readable/writeable, and you know the name), but you cannot 
list the dir contents, and you cannot add/remove files.
with r-x you can read/write files and list the dir contents, but 
not add/remove files
with rwx you can do everything.
Pekr
8-Aug-2006
[786]
thanks Gabriele, now things are more clear to me!
Rebolek
26-Sep-2006
[787]
my linux troubles (this is longer)


I'm pretty frustrated at this moment, maybe somebody can help me...


I'm linux newbie, I'm using it for 6 months or so. I've installed 
Ubuntu for my girlfriend and it works OK. So I decided to install 
linux for me too. I've got Athlon X64 computer, so I tried 64bit 
version of Ubuntu. But you cannot run 32bit programs under 64bit 
Linux, so no REBOL or AltMe. OK, I can live with 32bit linux, no 
problem. So I installed MEPIS. It's not bad, it has got media support 
but...it's KDE.


I never knew anything about KDE vs. Gnome vs. whatever wars, I just 
don't care, but day after day I found KDE to be bloated, slow and 
buggy. Compared to elegance of Ubuntu on my girfriend's computer 
I decided that I just don't like KDE, I don't like all that menus 
where I'm always lost, long loading times, that awful blue theme, 
childish icons and everything K-labeled. Every window and every button 
on KDE looks so BIG compared to windows GUI, it's just a waste of 
screens's space. So I tried different window managers and found Xfce, 
icebox and some other small and fast window managers. But running 
MEPIS with different window manager than KDE was not optimal so I 
decided to remove MEPIS and install xubuntu. Everything was OK and 
I had xubuntu instaled.


One day later I managed to exchange my gfx card. I was using Matrox 
Millenium 2MB PCI card and exchanged it for 3D labs Banshee 16MB 
PCI card (I know that both cards are somehow underpowered for my 
computer but that's OK, I don't play any 3d games, so I don't need 
some new card). I've booted into Windows and everything was OK. I 
can even select resolution better than 1024x768 (because that's not 
optimal resolution for 21" monitor :-) So I restarted and booted 
into xubuntu. x-server didn't start. 


As I said, I'm linux newbie so I don't want to mess with some config 
files so I said to myself OK, I reinstall it, it's just one day old 
installation, no problem. I've booted the live-cd, grub let me choose 
resolution of 1280x1024, I booted xubuntu and - it was running in 
640x480. Yes, I had the choice to change resolution - but only to 
320x240. I tried ubuntu (gnome) and it was the same. ubuntu's x-server 
probably does not support my banshee gfx card. I tried MEPIS also 
and - it worked! I can boot mepis 3.3.1 live cd in 1024x768 (but 
not more - with windows, I can go up to 1920x1440). But when I boot 
mepis, I do see that KDE desktop thing and it makes me feel sick 
(hell, even windows seem to be more fun to use than KDE for me!).


So, what now? I cannot use windows only (1. i don't like it :) 2. 
it's got problems of its own - it cannot download files bigger than 
cca 1MB without error. Probably some driver problem but I still haven't 
found a sollution. this is not problem on linux) and I don't like 
KDE. I know that there's one sollution - to buy relatively new pci-x 
n-vidia gfx card and problems may be gone. but that's not what I 
want to do. That 3dfx banshee is good enough for me, I just want 
some fast and small OS running on it.


Maybe I'm just missing a computer that can boot in 15 seconds into 
full GUI enviroment (yes, my old Amiga :)
Alan
26-Sep-2006
[788]
I have an  AMD 64 bit Acer laptop running Mandriva and have no problem 
running Rebol/Altme but I use KDE so not sure what would happen if 
 you tried to used another windows manger with it
Rebolek
26-Sep-2006
[789]
Is Mandriva 64bit?
Volker
26-Sep-2006
[790x3]
sudo dpkg-reconfigure xserver-xorg
but its ugly, i usually need several tries.
keep a backup of /etc/X11/xorg.conf .

May also work to get that file from another distro, eg that mephis, 
and overwrite it. the resolution-stuff  etc is in that file.
http://www.gentoo.org/proj/en/base/amd64/howtos/index.xml?part=1&chap=2
thats how to run 32bit on 64bt gentoo. not too easy, but possible.
For debian it looks easy for most programms. SInce ubuntu is a debian 
that trick may work too: https://alioth.debian.org/docman/view.php/30192/21/debian-amd64-howto.html#id292233
Rebolek
26-Sep-2006
[793x3]
thanks, i'll try
so i've got it working somehow, core works, but view and altme does 
not run with following error: User Error : REBOL : Cannot obtain 
default font
ah, now it works! :)
Anton
27-Sep-2006
[796]
What did you do ?
Rebolek
27-Sep-2006
[797]
I've searched Synaptic for "font", instaled lot of them, rebooted 
and it started working :) First I've installed ia32 libraries from 
Volker's link.
Anton
27-Sep-2006
[798]
Very good. Good to hear it's working.
Kaj
27-Sep-2006
[799]
I've heard about that font error from someone who upgraded from Ubuntu 
Breezy to Ubuntu Dapper. Did you do that?