Cron & Named Permissions

[stokes84]

Looks like two slight bugs are lingering that are present on CentOS 6.4 x86_64 and other CentOS versions (as stated in forum fixes).

Fresh install on updated CentOS x86_64 renders cronjobs unable to be created and dns logs unable to be read. Also the "Set Permissions" button does not remedy.

Original DNS Log Fix: Resolved @ Support Forum

Original Cron Fix: Resolved @ Support Forum

New DNS Fix: chmod 751 /var/named | chmod 771 /var/named/data

• Changing permissions from 750 to 751 on named and also changing permissions from 770 to 771 on data folder allows zpanel to execute named.run
• Possible underlying ownership error since this is requiring public execution permissions to get log access but is this even a security risk?
• Only tested exact permissions needed to read log file, didn't generate errors to "Clear" or "View".

New Cron Fix: chmod 744 /var/spool/cron

• changing permissions from 644 to 744 allows zpanel to write cronjobs

Could these fixes be included in etc/build/prepare.sh like so?

Example

echo "Setting permissions.."
chmod -R 777 /etc/zpanel/
chmod -R 777 /var/zpanel/
chmod 751 /var/named
chmod 771 /var/named/data
chmod 744 /var/spool/cron
echo "Complete!"

[TheNigelist]

Wouldn't a chmod -R 751 /var/named/ be better??

[stokes84]

For sure I mean it'd be simpler no doubt, was keeping the permissions tight. Only bumped exactly what was needed for access as opposed to a blanket solution.

[allebb]

Chris is right, we should ideally only be setting permission where we need to! Cheers for the PR Chris!

Sent from my iPhone

On 4 Mar 2014, at 05:36, Chris Stokes notifications@github.com wrote:

For sure, was keeping the permissions tight. Only bumped exactly what was needed for access as opposed to a blanket solution.

— Reply to this email directly or view it on GitHub.

[stokes84]

Thanks Bobby! Tossed the pull request in there attached to the Webalizer Module fix. Was originally just opening up for debate but looks good to go. Haven't generated any errors to tinker with but log viewing and counting is working fine.

[bitridge]

you guys are awesome, I was the first one to ask this issue on zpanel forum but that forum is down now, so you are a lifesaver.

[Ron-e]

Just for your knowledge: Zpanel is dead after the acquisition by Hostwinds and the voluntary staff have started an zPanel fork called Sentora and they have there own forum where they also give zPanel support..

http://sentora.org/ http://forums.sentora.org/

[bitridge]

Hi Ron,

thanks, is Sentora also similar to Zpanel and same features? hows the security.

thanks,

[Ron-e]

Yes, it can be seen like zPanel 10.1.2 or 10.2.0 like TGates (also from old zPanel team) said on the Sentora forum.. http://forums.sentora.org/showthread.php?tid=49&pid=262#pid262 There even will be an update script from zPanel 10.1.1 to Sentora 1.0.0 which is currently in RC stage.