cannot create cache directory

From: P. Paprok <ppaprok@dont-contact.us>
Date: Thu, 13 Nov 1997 17:33:34 +0000

Please help me,

I just download squid 1.1.18 to our IBM PowerPC model250
(OS AIX 4.1.2, gcc compiler) and build it (exactly as described
in "INSTALL" document) for the first time without any problems.

After quick config I try first start to create cache directories
but here are problem:

$ cd /usr/local/squid
$ bin/squid -z
97/11/13 16:40:27| Creating Swap Directories
FATAL: Failed to make swap directory /usr/local/squid/cache:
(13) Permission denied
Squid Cache (Version 1.1.18): Terminated abnormally.
CPU Usage: user 0 sys 0
Maximum Resident Size: 6640 KB
Page faults with physical i/o: 0

I believe that permissions was set properly (like squid want)
during make install. Now I should change some permissions,
but I would like to not create some security mistake.

Is there somebody who let me know:
- what are permissions during standard install set up so?
- what to do to let create cache properly without creating
  some security hole? Some chmod, chown,...?

Some next info:
cache_effective_user are set to existing "nobody nobody" and
permissions in squid directory set make install itself:
# ls -ld /usr/local/squid
drwxr-xr-x 5 root system 512 Nov 13 11:37 /usr/local/squid
# ls -l /usr/local/squid
total 24
drwxr-xr-x 2 root system 512 Nov 13 11:37 bin
drwxr-xr-x 2 root system 512 Nov 13 11:37 etc
drwxr-xr-x 2 root system 512 Nov 13 11:37 logs

Like root I cannot squid run and I get of course:
# bin/squid -z
97/11/13 16:41:38| Squid is not safe to run as root! If you must
97/11/13 16:41:38| start Squid as root, then you must configure
97/11/13 16:41:38| it to run as a non-priveledged user with the
97/11/13 16:41:38| 'cache_effective_user' option in the config file.
FATAL: Don't run Squid as root, set 'cache_effective_user'!
Squid Cache (Version 1.1.18): Terminated abnormally.
CPU Usage: user 0 sys 0
Maximum Resident Size: 6608 KB
Page faults with physical i/o: 0

Please mail me to my e-mail: mailto:ppaprok@applet.cz

Thanks

pavel paprok
Received on Thu Nov 13 1997 - 09:10:24 MST

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 16:37:31 MST