Page 1 of 1

dubious file permisssion recommendation in INSTALL_SHARED

Posted: Wed Dec 22, 2004 12:37 pm
by hollow
Hi,
in Your docs/INSTALL_SHARED document, You advise people to do the following:

Code: Select all

$ chown -R tom.www /home/www/tom.s9yblogs.org/htdocs/*
$ chmod go+rwx /home/www/j.s9yblogs.org/htdocs
$ chmod go+rwx /home/www/j.s9yblogs.org/htdocs/uploads/
Giving write permissions to 'others' is certainly not needed, especially since You already assume the users are members of group 'www'.

IMHO, the description should read

Code: Select all

$ chown -R tom.www /home/www/tom.s9yblogs.org/htdocs/*
$ chmod ug+rwx /home/www/j.s9yblogs.org/htdocs
$ chmod ug+rwx /home/www/j.s9yblogs.org/htdocs/uploads/
so the user can change his files, if he wants to, and the web server has access to all the stuff it needs.

Regards,
Harald

Re: dubious file permisssion recommendation in INSTALL_SHARE

Posted: Wed Dec 22, 2004 1:12 pm
by garvinhicking
Hi hollow!

You are indeed right and the permissions are set too low. I changed the documentation (and wiki) to read what you suggested.

Many thanks for bringing this to our attention!

Regards,
Garvin