Perl supports emulating setuid scripts, though I don’t think OTRS is meant to use that. Might make sure that the perl executable is owned by root and that none of the OTRS scripts are setuid. Otherwise, active use of OTRS should be running as the httpd user and timed events such as mail collection should be running as the user running cron.

If you look at the process list while perl is running, you can see the userid from anything that shows full process list detail, such as ps u or top.

---

From: otrs-bounces@otrs.org [mailto:otrs-bounces@otrs.org] On Behalf Of Dan King
Sent: Tuesday, July 10, 2007 12:12 PM
To: User questions and discussions about OTRS.org
Subject: [otrs] File permissions not correct for SysConfig

I am having an issue with file permissions for OTRS 2.1.7. I have run the SetPermissions.sh file before and after I received the permission errors. The two areas I have noticed so far are the SysConfig and Package Manager. The SysConfig error is below:

Message: Can’t write /opt/carms-utils/otrs/Kernel/Config/Files/ZZZAAuto.pm: Permission denied.

The Package Manager error is not helpful. It simply states I don’t have write permissions on OTRS home and should run SetPermissions.sh and as I stated before running SetPermissions.sh has had no effect.

I checked the permissions on ZZZAAuto.pm and it is set to 664. I changed the permissions to 666 and the SysConfig section worked fine. The problem is, as far as I can tell using the permissions 664 for ZZZAAuton.pm should work. My only guess is that perl is running under a different user other then the one that is run my webserver, otrs, or perl.

Does anyone have any suggestions? I am at a loss as to why this does not work. Does anyone know how to find out which user is running perl? This would allow me to find out if that user applies to the other category in the file permissions and would then be denied access.

Thanks for any help offered.

Dan King
Software Developer
Canadian Resident Matching Service
613.237.0075  ext. 241
(Toll free) 877.CARMS.42
171 Nepean Street, Suite 300
Ottawa, ON, CAN    K2P 0B4
www.carms.ca

------------------------------------------------------------------------------------

This e-mail message, including any attachments, is for the sole use of the intended recipients and may contain confidential and or privileged information.  If you are not the intended recipient or this information has been forwarded in error, please contact the sender by reply e-mail and destroy copies of the original message.  Ce message (incluant toute pièce jointe) s'adresse uniquement au(x) destinataire(s) prévu(s) ou à une personne autorisée à le recevoir en son (leur) nom. Il pourrait contenir des renseignements confidentiels ou protégés.  Si vous l'avez reçu par erreur, nous vous prions d'en informer l'auteur dans les meilleurs délais, de ne pas divulguer son contenu et de le supprimer de votre système. Merci.