View Single Post
  #8  
Old 7th December 2005, 15:54
Azathoth Azathoth is offline
Junior Member
 
Join Date: Dec 2005
Location: Linköping, Sweden
Posts: 3
Thanks: 0
Thanked 0 Times in 0 Posts
Default

Quote:
Originally Posted by falko
That's why realpath() fails: the directories can't be read by anyone else than root and named because of the permissions. If you changed the directories' permissions so that they can be read by anyone then realpath() would work.
This is not a good idea if sensitive data is stored in the zone file directory, such as DNSSEC information. I would either recommend that the realpath() function be run as a privileged user by ISPConfig or, if the realpath() function fails due to privilege problems, the path entered by the user is preserved as is.

I can't find any error handler in the ISPConfig code that checks for sane return values from the realpath() function. Since the function returns an empty value on error it might be prudent to check for empty return values before inserting them into the SQL database.

Quote:
Originally Posted by falko
That's what I describe in the Fedora tutorials ( http://www.howtoforge.com/perfect_se...dora_core_4_p3 and http://www.howtoforge.com/perfect_se...dora_core_3_p3 ):

Fedora and CentOS are very similar.
Thanks for pointing it out. I read through several of the guides before installing ISPConfig but I must have missed that specific detail.
Reply With Quote