(no commit message)

[git.ikiwiki.info.git] / doc / bugs / More_permission_checking.mdwn

diff --git a/doc/bugs/More_permission_checking.mdwn b/doc/bugs/More_permission_checking.mdwn
index e56cda98b1d8fd831db1b5cda92cca9245f6e63c..6cd6cb0ec62d99837dc9ca16adbf530bed45d8da 100644 (file)
--- a/doc/bugs/More_permission_checking.mdwn
+++ b/doc/bugs/More_permission_checking.mdwn
@@ -7,3 +7,11 @@ I think I've triggered these problems by (not thinking and) running `ikiwiki --r
 I don't know if there can be some lookup with `/etc/ikiwiki/wikilist`.  Though shouldn't everything be under the `www-data` group in reality?
 
 Also when I use `sudo ikiwiki -setup /etc/ikiwiki/auto.setup`, I think I create a ton of problems for myself since everything is created as the root user, right? And `/etc/ikiwiki/wikilist` doesn't seem to have the latest created wiki added. I have to reluctantly manually do this.
 I don't know if there can be some lookup with `/etc/ikiwiki/wikilist`.  Though shouldn't everything be under the `www-data` group in reality?
 
 Also when I use `sudo ikiwiki -setup /etc/ikiwiki/auto.setup`, I think I create a ton of problems for myself since everything is created as the root user, right? And `/etc/ikiwiki/wikilist` doesn't seem to have the latest created wiki added. I have to reluctantly manually do this.

+
+> You should never make files be owned by www-data user or group.
+> Ikiwiki is designed to run as a single user, which can just
+> be your login user; all files should be owned by that user, the
+> ikiwiki.cgi and other wrappers suid to that user. And then there are
+> never any permissions problems. --[[Joey]]
+
+[[done]]