[asterisk-users] asterisk as non-root/best practices

[Alan Lord]

Tzafrir Cohen wrote:
> On Wed, Nov 21, 2007 at 01:53:58PM -0500, Kristian Kielhofner wrote:
> 
>> (as root)
>> chown -R asterisk:asterisk /etc/asterisk
>> chmod -R 770 /etc/asterisk
> 
> Nitpeeking:
> 
> Now you made everything there executable.
> 
> chmod -R o= /etc/asterisk
> chmod -R ug+rwX /etc/asterisk
> 
> (Any shorter way?)

This is how I did it:

chown -R root:asterisk /etc/asterisk
chmod 750 /etc/asterisk
chmod 640 /etc/asterisk/*

I also found I needed to make /etc/asterisk/voicemail.conf writeable by 
asterisk, so asterisk's configuration dorectory now looks like this:
[ /etc/asterisk ]# ls -l
total 44
-rw-r----- 1 root asterisk   93 2007-10-14 11:54 asterisk.conf
-rw-r--r-- 1 root asterisk  417 2007-10-16 21:34 codecs.conf
-rw-r----- 1 root asterisk 6645 2007-11-19 09:36 extensions.conf
-rw-r----- 1 root asterisk  958 2007-11-07 15:02 iax.conf
-rw-r----- 1 root asterisk  317 2007-10-04 16:01 logger.conf
-rw-r--r-- 1 root asterisk  141 2007-10-25 13:17 meetme.conf
-rw-r----- 1 root asterisk   23 2007-10-04 16:01 modules.conf
-rw-r----- 1 root asterisk 1842 2007-11-05 21:11 sip.conf
-rw-rw---- 1 root asterisk 1147 2007-11-19 09:55 voicemail.conf
-rw-r----- 1 root asterisk  737 2007-11-14 14:33 zapata.conf

HTH

Alan
-- 
The way out is open!
http://www.theopensourcerer.com