[Date Prev][Date Next][Thread Prev][Thread Next][Minivend by date
][Minivend by thread
]
RE: Multiple Minivends on one machine
****** message to minivend-users from "Wade" <Wade@TerraOne.com> ******
Is there a reason NOT to put the catalog directory and the cgi directory for
each virtual site using minivend under each virtual site's document root, or
am I missing the Big Picture?!
Wade
-----Original Message-----
From: owner-minivend-users@minivend.com
[mailto:owner-minivend-users@minivend.com]On Behalf Of Dan Busarow
Sent: Thursday, March 18, 1999 12:29 PM
To: minivend-users@minivend.com
Subject: Re: Multiple Minivends on one machine
****** message to minivend-users from Dan Busarow <dan@dpcsys.com>
******
On 18 Mar 1999, John Goerzen wrote:
> I work for an ISP that would like to offer Minivend for customers that
> wish to provide things online. Our setup is: each customer has their
> own Unix account, and they cannot read or write to files in other
> accounts. We would like to have a site-wide installation of Minivend,
> and have only the applicable catalogs and related files stored in each
> user's directory. This way, upgrades would hopefully be easier,
> resource utilization would be lower because of only one Minivend
> daemon running, and disk space requirements would be lower.
>
> However, the documentation doesn't address how to set up Minivend in
> this manner. I'm curious as to how one would do that, and secondly,
> what security implications there might be. (Ie, if you have access to
> configure one catalog, could this be exploited to access a different
> catalog?)
See the Catalog directive in minivend.cfg. Simply specify where
the catalogs live, ie
Catalog catalog1 /home/user1/catalog1 /cgi-bin/catalog1
Catalog catalog2 /home/user2/catalog2 /cgi-bin/catalog2
You'll need to be careful with group permissions especially if the users
are not chroot'd into their home dir. Probably you would want
permissions like 775 user.minivend on the catalog directories and
664 user.minivend on the pages, and 750 user.minivend on the user's
home directory. Users would *not* belong to group minivend.
Dan
--
Dan Busarow 949 443 4172
Dana Point Communications, Inc. dan@dpcsys.com
Dana Point, California 83 09 EF 59 E0 11 89 B4 8D 09 DB FD E1 DD 0C 82
-
To unsubscribe from the list, DO NOT REPLY to this message. Instead, send
email with 'UNSUBSCRIBE minivend-users' in the body to
Majordomo@minivend.com.
Archive of past messages: http://www.minivend.com/minivend/minivend-list
-
To unsubscribe from the list, DO NOT REPLY to this message. Instead, send
email with 'UNSUBSCRIBE minivend-users' in the body to Majordomo@minivend.com.
Archive of past messages: http://www.minivend.com/minivend/minivend-list
