Check Installation Notice

Document ID : KB000044584
Last Modified Date : 14/02/2018
Show Technical Document Details

 

Issue:

Notice on App directories on Check Installation

 

  • NOTICE : htdocs directory should not be writeable for php outside of an update
  • NOTICE : include directory should not be writeable for php outside of an update
  • NOTICE : main application source directories should not be writeable for php outside of an update
  • Capture.PNG

Environment:

All

Cause:

Basically a web application does not need write access to its own code base. It should not create or modify files in the document root of in any of its library paths.
Therefore it is implemented that write check for the htdocs/include directories.

Check installation throws a notice because in that installation the user which is running the web server process (probably IUSR, but could be another user which is running the application pool) actually can create files in these directories.

So a good thing would be to remove the write permission from the IUSR.

*BUT* CA SAM offers the option to update itself with the so called web updater. Therefore the application needs write access to all of its directories, of course. So it would be necessary to give the IUSR write permissions before any update and revoke that permission after the update. What normally happens is that people just leave the write permission all the time. And that is why it just pointed as a notice instead of a warning or an error.

 

Resolution

Removing read/write permissions for the IUSR user will resolve the notice in the Check_Installation for the app directories. But for a CA SAM update IUSR will need write permission to these directories.  So write permission can be given before CA SAM update and revoke the permission after the update. 

It is recommended to just ignore this error.