[aur-dev] [PATCH] INSTALL: Allow access to home directory

[Lukas Fleischer]

On Thu, Dec 06, 2012 at 01:57:01PM +0100, Marcel Korpel wrote:
> On Wed, Dec 5, 2012 at 11:26 PM, canyonknight <canyonknight at gmail.com> wrote:
> > On Wed, Dec 5, 2012 at 12:05 PM, Marcel Korpel <marcel.lists at gmail.com> wrote:
> >> ---
> >>  INSTALL | 3 +++
> >>  1 file changed, 3 insertions(+)
> >>
> >> diff --git a/INSTALL b/INSTALL
> >> index 76df42b..d682eda 100644
> >> --- a/INSTALL
> >> +++ b/INSTALL
> >> @@ -69,6 +69,9 @@ Setup on Arch Linux:
> >>     $ mysql -uaur -p AUR < ~/aur/support/schema/aur-schema.sql
> >>     (give password 'aur' at the prompt)
> >>
> >> + - Allow access to home directory (otherwise you'll get a 403 Forbidden error)
> >> +   $ chmod o+x $HOME
> >> +
> >>   - Optionally load some test data for development purposes.
> >>     # pacman -S words fortune-mod
> >>     $ cd ~/aur/support/schema/
> >> --
> >> 1.8.0.1
> >
> > Not a fan of this. It's better to just make a note for the user to
> > check that all their permissions are setup correctly.
> 
> I'm also not a fan of setting world access to my home directory, but
> this was the solution that popped up after a Google search. I think a
> note about permissions being setup correctly is just too summarily:
> what does correctly mean in this case? A user still has to Google why
> they get a 403. Or is a better solution available to grant Apache
> access to a directory in the home dir?

I'm with canyonknight on this one. Changing the group of the AUR tree to
what your HTTP/FastCGI server uses is probably the easiest "right" way
to do this, but since permissions pretty much depend on your setup and
since this isn't anything AUR-specific, I think we should not add
anything detailed...

> 
> Regards, Marcel