I'm new with Linux administration and I'm configuring a Cherokee Web Server.
I'm using Archlinux so I have a http user that owns /srv/http. On the other hand I have a user called 'jesus' that is inside the http group.
Cherokee is working with user and group http (http:http)
So I made some changes to /srv/http. I added permissions to the group to write there and I changed the owner and group like:
drwxrwxr-x 3 jesus http 4096 Oct 25 14:00 http
It was like:
So now python can write his .pyc files there (I think that cherokee tell python to create that and because cherokee is able to write there).
My questions are: Is this permission stuff correct? Someone told me that the group shouldn't have write permissions and is better if I have the http folder (and my websites inside) like:
drwxr-xr-x 3 http http 4096 Oct 25 14:00 http
So cherokee will be able to write inside because http owns the folder.
Meh, I'm confused.
So, what permissions should have my http folder and everything inside it and what user & group should own that?
I just need my personal websites to run without big security issues :P
PS: Maybe this is related. When python creates his .pyc files, they are -rw-r--r--. Is that correct too?