OT: Client-based CMS

[Jack Berger]

Date: Tue, 21 Jun 2005 11:09:29 -0400
From: Kurt Wall <kwall at kurtwerks.com>
Subject: Re: OT: Client-based CMS
To: Linux tips and tricks <linux-users at linux-sxs.org>
Message-ID: <200506211109.30063.kwall at kurtwerks.com>
Content-Type: text/plain;  charset="iso-8859-1"

On Monday 20 June 2005 23:33, A. Khattri enlightened us thusly:
> > On Mon, 20 Jun 2005, Kurt Wall wrote:
> > > ...or write-access to $HOME (which assumes a shell account) and
> > > the ability to install apps into $HOME.
> >
> > Not necessarily - you can provide FTP access without giving shell access.
> > Most of the server-based CMS software Ive seen only require the ability
> > to upload files - most installations are web-based generally.

> On Mon, 20 Jun 2005, Kurt Wall wrote:
> Good point. I'm so accustomed to shell access that I forget it isn't
> necessary.

Yes, in fact I'm having a somewhat heated debate w/our security "experts" over this right now. We currently have our ftp accounts set up w/no shell, which limits what they can do quite well. Our security folks want to enforce secure ftp which requires a shell account to work. There is nothing sensitive about the data, and I would prefer that people have the limited access provided by no shell. Someone snooping the data is not a big concern.