On Tue, 8 Sep 2009 17:46:12 -0500, you wrote:
3) Having a sudoers entry for HTTPDUSER that includes /sbin/reboot and /sbin/halt will earn you some discussion with our security folks.
I completely disable these in my config. Instead, I use the following sudoers entries.
wwwrun ALL= NOPASSWD: /usr/sbin/faxdeluser, /usr/sbin/faxadduser -u * -p * *
That way, the only way permissions given to wwwrun are faxdeluser and faxadduser. Bouncing or halting the server is reserved for normal management by ssh.
That's my line of thinking too :)
This is where managing avantfax as a normal web app helps. All you need is +1 Being out of step with the rest of the Linux distros and the packager itself makes it near impossible to stick to the "pristine" source rpm philosophy.
You obviously failed to notice that I had quoted you and did not take your POV :) IMO it *is* a good decision to use /var/spool/fax.
Regardless of the amount of work these two packages need to be packaged for openSuSE, it is 100% worth the effort.
Hmm, how about you maintaining it with me as a co-maintainer? Philipp -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org