Changeset 2260

Timestamp:

05/19/05 18:52:16 (19 years ago)

Author:

jerome

Message:

Added some informations wrt systems on which CUPS doesn't run as root

Location:

pykota/trunk

Files:

• FAQ (modified) (2 diffs)
• SECURITY (modified) (2 diffs)

pykota/trunk/FAQ

@@ -38 +38 @@
     It's probably best to do this :
     
-        $ chown pykota.pykota pykota.conf pykotadmin.conf
-        $ chmod 640 pykota.conf
-        $ chmod 600 pykotadmin.conf
+        $ chown pykota.pykota ~pykota/pykota.conf ~pykota/pykotadmin.conf
+        $ chmod 640 ~pykota/pykota.conf
+        $ chmod 600 ~pykota/pykotadmin.conf
         
     Then the user 'pykota' will be the only PyKota Administrator    
@@ -47 +47 @@
     like repykota.
     
+    But on some systems, the following may be needed instead :
+      
+        $ chown lp.pykota pykota.conf pykotadmin.conf
+        $ chmod 640 pykota.conf
+        $ chmod 640 pykotadmin.conf
+        
   * How can I limit my users to N pages per day (month/year) ?
   

pykota/trunk/SECURITY

@@ -49 +49 @@
     Debian you may want to do : 
     
-        $ chown pykota.pykota pykota.conf pykotadmin.conf    
-        $ chmod 640 pykota.conf
-        $ chmod 600 pykotadmin.conf
+        $ chown pykota.pykota ~pykota/pykota.conf ~pykota/pykotadmin.conf    
+        $ chmod 640 ~pykota/pykota.conf
+        $ chmod 600 ~pykota/pykotadmin.conf
         
     Depending on your needs, you may want to put the user the printing 
@@ -58 +58 @@
     For example : 
     
-        $ chmod 640 pykotadmin.conf
+        $ chmod 640 ~pykota/pykotadmin.conf
         $ adduser lp pykota
           (this makes user 'lp' a member of group 'pykota')
     
+    Another solution, needed on some systems :
+    
+        $ chmod a+rx ~pykota/
+        $ chown lp.pykota ~pykota/pykota.conf ~pykota/pykotadmin.conf 
+        
     Letting any user read PyKota administrator's configuration file may 
     expose passwords or database information which would allow write