Directory Permissions & SECURITY

[Lisa Kachold]

If you want Apache to be able to serve those files on your webserver, you are going to need to match whatever they are set for via  a good chown/chmod to be sure that apache (or nobody) has permissions.

It's generally a BAD IDEA to leave that WEBSERVER directory group (or even user) writable.

So, you might use the /tmp directory to upload the files, then move them over and chmod/chown to match current permissions using a root or sudo account.

If you contact me offline with a directory file example, I can send you the command you will need to use.

www.Obnosis.com |  http://en.wiktionary.org/wiki/Citations:obnosis |
http://www.urbandictionary.com/define.php?term=obnosis (503)754-4452
Catch the January PLUG HackFest!   Kristy Westphal, CSO for the Arizona Department of Economic
Security will provide a one hour
presentation on forensics.




Date: Mon, 1 Dec 2008 14:45:57 -0700
From: jd at twingeckos.com
To: plug-discuss at lists.plug.phoenix.az.us
Subject: Re: Directory Permissions

Yes it's chmod.  Generally directories can get 755 and be fine.  If it needs more than that (if the web server isn't running as the same user) then 775 would work.


On Mon, Dec 1, 2008 at 1:28 PM, Mike Hoy <mhoy06 at gmail.com> wrote:

I'm pretty new at Linux still and I am confused about directory

permissions. I'm trying to upload products to our website here at work

(Linux Server Cent OS). It says a certain directory lacks write

permissions.



I wanted to see what the permissions were on it so I did a ls -l, but

that shows the contents of the directory (and it's huge, full of

images).



Then I want to give write access to that directory. Is it CHMOD that I

need to use here?



Any feedback appreciated. Gotta get these products uploaded and fast!



--

Mike Hoy

---------------------------------------------------

PLUG-discuss mailing list - PLUG-discuss at lists.plug.phoenix.az.us

To subscribe, unsubscribe, or to change your mail settings:

http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss



_________________________________________________________________
Access your email online and on the go with Windows Live Hotmail.
http://windowslive.com/Explore/Hotmail?ocid=TXT_TAGLM_WL_hotmail_acq_access_112008
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.PLUG.phoenix.az.us/pipermail/plug-discuss/attachments/20081201/8250cfcf/attachment.htm