dubious file permisssion recommendation in INSTALL_SHARED

[hollow]

Hi,
in Your docs/INSTALL_SHARED document, You advise people to do the following:

Code: Select all

$ chown -R tom.www /home/www/tom.s9yblogs.org/htdocs/*
$ chmod go+rwx /home/www/j.s9yblogs.org/htdocs
$ chmod go+rwx /home/www/j.s9yblogs.org/htdocs/uploads/

Giving write permissions to 'others' is certainly not needed, especially since You already assume the users are members of group 'www'.

IMHO, the description should read

Code: Select all

$ chown -R tom.www /home/www/tom.s9yblogs.org/htdocs/*
$ chmod ug+rwx /home/www/j.s9yblogs.org/htdocs
$ chmod ug+rwx /home/www/j.s9yblogs.org/htdocs/uploads/

so the user can change his files, if he wants to, and the web server has access to all the stuff it needs.

Regards,
Harald

[garvinhicking]

Hi hollow!

You are indeed right and the permissions are set too low. I changed the documentation (and wiki) to read what you suggested.

Many thanks for bringing this to our attention!

Regards,
Garvin