0
votes
1answer
29 views

Changing file permissions on web server to follow Least Privilege Security Principle: chmod 750 -R /

I'm not sure what details are relevant, but here is some general context. I'm configuring a Ubuntu 12.04 web server on AWS to process customer payment info before redirecting them to a hosted ...
0
votes
3answers
538 views

How to set acl on my fstab file?

I would like to enable acl on my remote server. So I type the following command df to know on which partition I am : Here is the result : Filesystem 1K-blocks Used Available Use% Mounted on ...
0
votes
1answer
99 views

correct permissions mod for /var/www/project

I am developing web applications with Ubuntu Linux, MySQL and PHP. I put my files in the /var/www/some_web_project/ directory. I have problems with permissions, for example when I want to output ...
1
vote
1answer
354 views

File permissions on files and directories added via ftp [closed]

I have recently bought a raspberry pi that I have installed as an Apache web server. I do however have one problem: When I add files via ftp the permissions are set to -rw-------. There for I can not ...
2
votes
2answers
2k views

IIS 8 folder url and permissions

I am fairly new to IIS coming from simple old apache. I am trying to figure out how to grant 777 permissions on a website i added in IIS. i need 777 permissions for that folder because its a php ...
4
votes
1answer
52 views

What is this user name for and how did it get created?

When I created a website named Portal on my IIS 7.5 on the website permissions->security I got this user. What is its purpose? From what I have read the ApplicationPool runs under NetworkService ...
1
vote
1answer
47 views

How can we change the default permissions for files uploaded to our web server?

When a user uploads image files to our website the default permissions result in images which can't be viewed. How can we change default permissions to 755 automatically when for uploaded images?
-3
votes
1answer
114 views

Protecting a chmodded 0777 cache directory?

A website I'm developing requires several directories to have their permissions set to 0777. The directories are used as cache directories for HTML and PHP files generated by the website. The ...
1
vote
0answers
251 views

How to set linux permissions to allow Apache to have access to a file [closed]

Linux noobie here, I'm still figuring things out as I move along. At my school we have a shared server environment where every student gets an account. But we have very limited permissions. I have a ...
1
vote
0answers
155 views

Cannot write to Apache www directory LAMP

I've got Fedora 16 running Apache, PHP & MySQL. I want to do 2 things: Share a directory within the www directory over Samba Use CMS systems that have automatic install/configure scripts I've ...
0
votes
2answers
436 views

How to set ownership on a webserver

We have an internal server where we work on with 3 users. It is running ubuntu with apache mysql proftpd We often have permission errors. Sometimes we can't overwrite files but we can delete them ...
0
votes
1answer
915 views

How to make sure www directory is secure?

I managed to order a new VPS account from linode I have installed Ubuntu 10.04 LTS with 'LAMP Stack' StackScript. I notice the website directory is located in /srv/www/ and I thought this is quite ...
64
votes
5answers
33k views

What permissions should my website files/folders have on a Linux webserver?

This is a Canonical Question about File Permissions on a Linux web server. I have a Linux web server running Apache2 that hosts several websites. Each website has its own folder in /var/www/. ...
1
vote
1answer
121 views

Make a file accesible by PHP but not from the outside

My host gives me two folders for my use, a /home/public/ which is where the pages go, and /home/private/, which is for my personal use. I would like for PHP to create a file that's readable by me from ...
0
votes
3answers
1k views

How do I change the user that the Apache web server runs under in CentOS?

I have one directory called apps/cache. When a script writes some files to that directory those files are owned by the nobody user. Of course, then those files and folders are not editable by any ...
0
votes
1answer
264 views

Deploying content to web server with rsync: permissions

I have a Ubuntu 10.04 server running nginx with nginx running as user nginx. I'm trying to deploy an Octopress-based site with rsync and have stumbled on what looks like a security dilemma. ...
3
votes
5answers
7k views

is it safe to chmod 775/664 with owner www-data:www-data?

To make working with my webserver easiest I am proposing doing something like the following: sudo chown www-data:www-data /var/www -R cd /var/www sudo find . -type f -exec chmod 664 {} \; sudo find . ...
0
votes
1answer
275 views

Site not picking up CSS styles when LIVE

I am using ASP.NET 3.5. For some reason when I apply CSS to my controls on my plain form it shows in Visual Studio and it does work fine. But for some reason when I make my site LIVE none of the ...
0
votes
4answers
294 views

Webserver and PHP File Security

I'm trying to figure the right security settings for the files on my shared webserver and I have a few basic questions that I've not figured out by looking around. How do I stop people reading my PHP ...
0
votes
1answer
537 views

Apache Permission denied problem on OS X

I get the following log error when I try to run my website locally on my OS X Snow Leopard: [error] [client 127.0.0.1] (13)Permission denied: access to / denied I have enabled the virtual hosts and ...
1
vote
0answers
187 views

can't view images stored on mounted network drive on linux webserver

I have a network drive mounted at /home/lv_admin/uslonsnas001 where I have stored images. The mount point and all sub folders have rwx mod 775 privileges. My PHP script moves the images to this mount ...
1
vote
2answers
125 views

Howto separately manage IIS permissions?

Question: I need to give a user (developer) permission to restart IIS add applications copy websites to inetput/wwwroot change IIS settings The user does and may NOT have admin rights, as this ...
1
vote
1answer
123 views

Permissions for user on linux machine to host website

I have root access to my hosted machine. I have created a user account 'abcd' and the user's directory is: /home/abcd/public_html In httpd.conf i have: <VirtualHost *:80> ServerName ...
2
votes
1answer
289 views

Securing an Apache Setup with a Fresh Ubuntu Web Server with users and permissions

I have a virtual Server with Ubunto 10.04 on. My host Mediatemple have a few guides on trying to secure the apache config, but I think they are missing some details, or at least it makes no sense to ...
0
votes
1answer
813 views

Access Denied on LAN IIS Access via Integrated Authentication

I have an IIS 7.5 (Win2k8R2) Webserver, which publishes an UNC Share (on a Fileserver) with restricted access. The AppPool Identity is a Domain User-Account with read access to mentioned UNC path. ...
0
votes
1answer
115 views

Multiple web devs pushing code to a live site

I want to start using a version control system (git) to manage having multiple website developers working on websites. This way, we can all see who made what changes and at what time. I did some ...
3
votes
2answers
587 views

How do I mange permissions for multiple users editing the same code on my server?

I have a server that a few different coders will be using to work on various websites. Each coder will need to have access to each website. There's two 'clean' methods I've come up with to do this ...
3
votes
3answers
437 views

Difference between 'apache' and 'www' users?

I'm configuring Apache 2 on CentOS 4 (roughly equivalent to Red Hat). There are two users related to security for httpd: apache and www. It seems to me that apache is the user the web server actually ...
1
vote
2answers
2k views

Nginx not working properly on subdomains [SOLVED]

I've been trying to setup a Sugar CRM instance. I've got a domain that has its main site on a server (www.domain.com) and I've created a subdomain (sugar.domain.com), but I wnat this subdomain to be ...
0
votes
1answer
324 views

setting permissions in user's home folder, to stop a 403 error

In my root folder on my school account I have a bunch of files and folders, e.g., $ ls foobar.txt Private Public www By default, all the files in Public/ and www/ are viewable on the web ...
0
votes
1answer
54 views

Chrome lets me access files on a server, but both firefox and safari claim they're protected?

I have a webserver where navigating to html or xml pages with Chrome causes no problems, but I get a uname/password security prompt if I try to access the same links from either firefox or safari? ...
-1
votes
1answer
1k views

Apache config: Permissions, Directories and Locations

I'm trying to get my head around apache configuration to fix a problem I'm having but after a few hours I've decided to ask here. This is what I've got at the moment: DocumentRoot "/var/www/html" ...
3
votes
3answers
117 views

Security Dangers of Loose Permissions

To an extent, I understand the purpose of limiting permissions to just what is needed, but I don't have a complete grasp of the possible dangers of having them open. I'm most concerned with web ...
5
votes
2answers
618 views

What is the proper way to set up the Apache document root in terms of privileges?

I have just installed Ubuntu 9.10 server edition on my machine and I wish to run my own personal local server with other users in the same LAN. First, I was wondering what folder directory structure ...
0
votes
1answer
2k views

postfix configuration

failed to start the postfix service output given was postfix: fatal: config variable inet_interfaces: host not found: all And my main.cf file is # Global Postfix configuration file. This file ...
1
vote
2answers
532 views

Is it safe to make the wwwroot folder writeable?

I am trying to use IIS7 web server. I found out that I cannot edit (or create) files in this directory. The reason for that is that this directory has read-only permissions. I could change this ...
1
vote
2answers
970 views

How to check and change permissions of files and folders for web server in windows?

I have installed Apache server on Windows 7. When I try to access the server by its IP address I get in Chrome: Forbidden You don't have permission to access / on this server. In IE I ...
2
votes
2answers
3k views

What should the permissions be on a website in IIS7?

Okay, let me just say I have little idea of what I'm doing here. Sorry if I'm making this more complicated than it needs to be, I have a website that I've been setting up on IIS6 for awhile now, it ...
0
votes
1answer
455 views

Webserver HTML folder Permissions

I am running lighttpd and I have the root directory of my website in my user home folder. I would like to serve the website, but not allow other users on the machines to view my home folder or the ...
1
vote
1answer
302 views

What user should an application pool bound to a Wordpress site use in IIS? [duplicate]

I've installed a wordpress site in a dedicated server with Windows 2008 server running IIS7 but I'm a little confused on what's the most secure way to set the appropriate file settings. The thing is ...
0
votes
2answers
262 views

Editing as wwwrun

Let's say you have a web server where the htdocs and everything in it is owned by the apache daemon, wwwrun and it's group, www. What's the best way to set up an external web editor such as Bluefish ...