Priority: Enhancement
Current State: Closed
Released In: 1.1.0
Target Release: minor
Applies To: Engine
Component: configure
Branches:
Server root directory was owned by root, not the server user.
Error: Failed to move file 'ToolTipPlugin_installer' to /var/www/foswiki100/ToolTipPlugin_installer: Permission denied
Configure should detect that root is not writable.
Also some sites run /tmp on a partition mounted noexec to block certain web attacks. configure should detect that /tmp is noexec. (Not sure if this is still an issue - but didn't want to loose the thought, so putting it here as it is somewhat related.
This is mostly resolved for Foswiki 1.1. The rewritten Package installer no longer writes the _installer and archive files into the web server root. Also with reference to the noexec comment, the downloaded _installer file is not executed, so it can be stored on a noexec file system.
There is still a small opportunity for issues if an extension drops any files into the web server root. In response, I've added a check to the "Web Server Environment" section of bin/configure for 1.1. If the server root is not writable, a warning is placed into the DOCUMENT_ROOT section of the configuration.
--
GeorgeClark - 14 Jun 2010