[freeside-users] selfservice.cgi: not running as the freeside user

Ivan Kohler ivan at freeside.biz
Wed Jan 13 07:29:40 PST 2010


On Tue, Jan 12, 2010 at 04:46:46PM -0500, Jim Cobb wrote:
> Now I really feel stupid! LOL
> 
> Changing apache to run as user freeside worked.

This is probably a bad idea on your public self-service web server, if 
you use it for anything else.  The reason for having a separate user was 
to keep things isolated, not to make you expose everything else on that 
server.

If you can't use suidperl or suexec, I'd recommend changing 
ownership/permissions on the self-service socket as per the docs:

http://www.freeside.biz/mediawiki/index.php/Freeside:1.9:Documentation:Self-Service_Installation#Installing_web_interface

In ancient versions, you may need to remove the explicit check for the 
freeside user.

-- 
_ivan


More information about the freeside-users mailing list