On Feb 20, 2006, at 9:28 PM, Mark Pallo wrote:
Since I tried this as a replacement for Squirrelmail just for my
personal use (about 5 accts) I decided to wipe my install clean and go with
the new upgraded beta tonite. Works great now. My "nobody" issue is
resolved along with the errant "" I would get when using apostrophes in the
addressbook display name.I just noticed I forgot to CHMOD my temp and logs directories to
777. Is this still necessary? Everything works fine.
Setting directory permissions to 777 was never necessary. In fact,
its really a race condition waiting to happen. The only user who
needs to be able to write to roundcube's tmp and log dirs is the user
the webserver runs as. If you're going to use 777, you may want to
consider setting the sticky bit as well (like /tmp is by default) to
ensure that user's can only modify their own data.
On a small system its probably not an issue, but on multiuser systems
it can be a problem.
-- J.