diff options
| author | http://lj.rossia.org/users/imz/ <http://lj.rossia.org/users/imz/@web> | 2009-05-15 19:03:24 -0400 |
|---|---|---|
| committer | Joey Hess <joey@kitenet.net> | 2009-05-15 19:03:24 -0400 |
| commit | 5d8fa0de2736b615b62f6c5df4c015ee868fe703 (patch) | |
| tree | 97f015c036fae5bc3c26ce3375e5c5da04b4afaf /doc | |
| parent | af3b457b80d9cd7fa85514e1f1dd583e2f165ba3 (diff) | |
| download | ikiwiki-5d8fa0de2736b615b62f6c5df4c015ee868fe703.tar ikiwiki-5d8fa0de2736b615b62f6c5df4c015ee868fe703.tar.gz | |
More my thoughts about making a secure public wiki -- perhaps someone will find them useful
Diffstat (limited to 'doc')
| -rw-r--r-- | doc/tips/dot_cgi/discussion.mdwn | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/doc/tips/dot_cgi/discussion.mdwn b/doc/tips/dot_cgi/discussion.mdwn index 982621295..50e6fd9d5 100644 --- a/doc/tips/dot_cgi/discussion.mdwn +++ b/doc/tips/dot_cgi/discussion.mdwn @@ -2,4 +2,6 @@ Is your warning at the bottom (you don't know how secure it is) only about lighttpd or it's about apache2 configuration as well? -I'm asking this because right now I want to setup an httpd solely for the public use of ikiwiki on a general puprpose computer (there are other things there), and so I need to choose the more secure solution. --Ivan Z. +I'm asking this because right now I want to setup an httpd solely for the public use of ikiwiki on a general purpose computer (there are other things there), and so I need to choose the more secure solution. --Ivan Z. +> AFAIU, my main simplest security measure should be running the public ikiwiki's cgi under a special user, but then: how do I push to the repo owned by that other user? I see, probably I should setup the public wiki under the special user (so that it was able to create the cgi-script with the desired permission), and then give my personal user the required permissions to make a git-push by, say, creating a special Unix group for this. +> Shouldn't there be a page here which would document a secure public and multi-user installation of ikiwiki (by "multi-user" I mean writable by a group of local Unix users)? If there isn't such yet, I started writing it with this discussion.--Ivan Z. |