0
votes
1answer
87 views

Ubuntu, How to prevent listing sub-directory if parent-directory is protected

I remember last time when I am on some Linux OS ( cannot remember ), when I change the mod of a directory to 711, that folder together with all of its sub-directories cannot be listed (ls -al) by any ...
1
vote
1answer
465 views

Adding Apache to a Developer Group (Web Permissions)

On a private server with an application that needs write access (Wordpress), is it better to add Apache's web user (www-data) to the "developers" group that owns /var/www or use fastcgi / suphp ...
1
vote
1answer
964 views

Set Default User / Group (Sticky Bit) in Ubuntu

To enforce the following permissions on files in /var/www, can I use the commands chmod u+s and chmod g+s? Permissions: chown -R root:web /var/www chmod -R g+rw /var/www
3
votes
4answers
871 views

What are the cons of restricting chmod to root/sudo users?

I have an issue with some of my users misusing chmod by doing things like chmod 777 ~ -Rf I'd like to disable chmod so that only users with full sudo rights (I.E. IT) have rights. Are there any ...
1
vote
1answer
665 views

file permissions on shared host

I'm on a shared host, and a bit confused about file permissions: My website directory /home/user/www is owned by user:nobody Everything inside /home/user/www is owned by user:user (?) Most people ...
2
votes
2answers
474 views

CHMOD in web hosting

my Hosting is use Apache and PHP i understand what it's mean 777 in CHMOD or drwxrwxrwx or Owner, Group, Public => read, write, execute. i understand with the RW CHMOD command but what about the X, ...
1
vote
2answers
232 views

Should I set permissions to 777 for setup and config file?

I am writing a large PHP application (with setup) for the first time and am wondering about the security precautions I should take for permissions. setup.php uses uses fopen/fwrite to generate a ...
1
vote
2answers
4k views

Is chmod 700 on a directory sufficient to prevent arbitrary access to subdirectories?

If I chmod 700 the the home directory of a user (on Linux), does this guarantee that other non-privileged users cannot access any subdirectory or file under that home directory? Or are there sneaky ...
4
votes
2answers
7k views

what chmod and owner:group settings are best for a web application?

we are configuring a PHP web application on CentOS and have all our files currently in /var/www/html/project/ Apache is configured to run as apache:apache and has access to the directory above. Right ...