Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.lang.python > #53207 > unrolled thread

Re: [error] [client 178.59.111.223] (2)No such file or directory: exec of

Back to article view | Back to comp.lang.python

This discussion starts older than the indexed window; earlier articles aren't shown. The article labeled Started by below is the oldest one visible, not the original post.

Contents

  Re: [error] [client 178.59.111.223] (2)No such file or directory: exec of Cameron Simpson <cs@zip.com.au> - 2013-08-29 10:59 +1000
    Re: [error] [client 178.59.111.223] (2)No such file or directory: exec of Ferrous Cranus <nikos.gr33k@gmail.com> - 2013-08-28 21:29 -0700
      Re: [error] [client 178.59.111.223] (2)No such file or directory: exec of Nick the Gr33k <nikos@superhost.gr> - 2013-08-29 07:49 +0300

#53207 — Re: [error] [client 178.59.111.223] (2)No such file or directory: exec of

On 28Aug2013 18:44, Prasad, Ramit <ramit.prasad@jpmorgan.com.dmarc.invalid> wrote:
| Ferrous Cranus wrote:
| > Yes Uli, the script metrits.py is being invoked by Apache Web Server which in turn runs under user
| > Nobody.
| > So, that mean that? user 'nobody' has no write permission to /home/nikos folder?

As Ramit says, yes. Your own directory listing earlier showed "r-x" for the
group "nobody"; that says "no write". The file was the same: "r--".

| Yes. You should make it group writable with "nobody" as the group. Use chmod and chown
| to change permissions and owners (i.e. groups).

To be explicit:

  chgrp nobody the-file
  chmod g+w the-file

| Normally I would have thought you would have a public_html or www directory in your
| home folder that would be readable/writable to the web server (and where you should 
| write).

Readable, yes. Writable? Generally mad. Apaches are often configured
to run as "nobody" or "nofiles" specificly to ensure that it cannot
write to stuff. The last thing you want is to have the website's
files writable by the apache; it is asking for defacements and other
hacks.

Nikos should make a specific directory for these files and give
ONLY THAT write permission for "nobody". And then use a full pathname
to the directory in his CGI script - a relative path makes ill
founded assumptions about the current working directory of the
script.

Cheers,
-- 
Cameron Simpson <cs@zip.com.au>

A gentleman does not go motoring about after dark.      - J. Lucas

[toc] | [next] | [standalone]

#53214

Τη Πέμπτη, 29 Αυγούστου 2013 3:59:49 π.μ. UTC+3, ο χρήστης Cameron Simpson έγραψε:

> To be explicit:
> 
> 
> 
>   chgrp nobody the-file
> 
>   chmod g+w the-file

Hello Cameron,

nikos@superhost.gr [~/www]# touch err.out
nikos@superhost.gr [~/www]# ls -l err.out        
-rw-rw-r-- 1 nikos nikos 0 Aug 29 04:26 err.out
nikos@superhost.gr [~/www]# chgrp nobody err.out 
chgrp: changing group of `err.out': Operation not permitted

As you can see the system does not let me alter even the groupname of a newly created text file.

As, for the 'suexec' that you mentioned in another ;post of yours, old VPS had it enabled yes, the new one does not. Should i ask them to enable it back?
Would it help if we enabled it back?

[toc] | [prev] | [next] | [standalone]

#53215

Στις 29/8/2013 7:29 πμ, ο/η Ferrous Cranus έγραψε:
> Τη Πέμπτη, 29 Αυγούστου 2013 3:59:49 π.μ. UTC+3, ο χρήστης Cameron Simpson έγραψε:
>
>> To be explicit:
>>
>>
>>
>>    chgrp nobody the-file
>>
>>    chmod g+w the-file
> Hello Cameron,
>
> nikos@superhost.gr [~/www]# touch err.out
> nikos@superhost.gr [~/www]# ls -l err.out
> -rw-rw-r-- 1 nikos nikos 0 Aug 29 04:26 err.out
> nikos@superhost.gr [~/www]# chgrp nobody err.out
> chgrp: changing group of `err.out': Operation not permitted
>
> As you can see the system does not let me alter even the groupname of a newly created text file.
>
> As, for the 'suexec' that you mentioned in another ;post of yours, old VPS had it enabled yes, the new one does not. Should i ask them to enable it back?
> Would it help if we enabled it back?
Perhaps 'suexec' would allow Apache(running under user nobody) to switch 
to another more privileged user prior of writing to 
'/home/nikos/www/err.out'

-- 
What is now proved was at first only imagined!

[toc] | [prev] | [standalone]

Back to top | Article view | comp.lang.python

csiph-web