Opened 7 years ago

Closed 5 years ago

#682 closed defect (invalid)

file permission review

Reported by: nico cesar Owned by:
Priority: major Milestone:
Component: programming Keywords:
Cc: Parent Tickets:

Description

<mg_root>/user_dev/media/public/ files are created with 'mediagoblin' user

but will be served by apache/nginx that will be readed by www-data on debian/ubuntu causing a 403 on the request on most installations

Subtickets

Change History (2)

comment:1 Changed 6 years ago by Simon Fondrie-Teitler

I don't think they can be set to www-data when Mediagoblin is running as the mediagoblin user. That user shouldn't have root permissions on the machine, and it's not possible for a non-root user to change the owner of a file.

However, if the files aren't being created with permissions that enables www-data to read them, that is an issue.

comment:2 Changed 5 years ago by Loic Dachary

Resolution: invalid
Status: newclosed

This does not happen when following the installation instructions (verified on Ubuntu 14.04).

Note: See TracTickets for help on using tickets.