-1
votes
1answer
36 views

Proper permissions setup for www-data to access /mnt

I'm running a simple LAN only LAMP server, running Debian 7.2. I need to mount a CIFS network share, and I need to have a PHP script write directly to that network share. What is the most common ...
2
votes
1answer
542 views

Can't FTP to /var/www/html on Ubuntu (groups set…)

So I'm having some issues with vsftpd. I need the webroot to be in /var/www/public because I have multiple users accessing it, so I can't put it in a users directory. Now that directory has "chown -R ...
0
votes
1answer
63 views

Changing file permissions on web server to follow Least Privilege Security Principle: chmod 750 -R /

I'm not sure what details are relevant, but here is some general context. I'm configuring a Ubuntu 12.04 web server on AWS to process customer payment info before redirecting them to a hosted ...
0
votes
3answers
758 views

How to set acl on my fstab file?

I would like to enable acl on my remote server. So I type the following command df to know on which partition I am : Here is the result : Filesystem 1K-blocks Used Available Use% Mounted on ...
0
votes
1answer
105 views

correct permissions mod for /var/www/project

I am developing web applications with Ubuntu Linux, MySQL and PHP. I put my files in the /var/www/some_web_project/ directory. I have problems with permissions, for example when I want to output ...
1
vote
1answer
537 views

File permissions on files and directories added via ftp [closed]

I have recently bought a raspberry pi that I have installed as an Apache web server. I do however have one problem: When I add files via ftp the permissions are set to -rw-------. There for I can not ...
2
votes
2answers
3k views

IIS 8 folder url and permissions

I am fairly new to IIS coming from simple old apache. I am trying to figure out how to grant 777 permissions on a website i added in IIS. i need 777 permissions for that folder because its a php ...
4
votes
1answer
54 views

What is this user name for and how did it get created?

When I created a website named Portal on my IIS 7.5 on the website permissions->security I got this user. What is its purpose? From what I have read the ApplicationPool runs under NetworkService ...
1
vote
1answer
47 views

How can we change the default permissions for files uploaded to our web server?

When a user uploads image files to our website the default permissions result in images which can't be viewed. How can we change default permissions to 755 automatically when for uploaded images?
-3
votes
1answer
119 views

Protecting a chmodded 0777 cache directory?

A website I'm developing requires several directories to have their permissions set to 0777. The directories are used as cache directories for HTML and PHP files generated by the website. The ...
1
vote
0answers
290 views

How to set linux permissions to allow Apache to have access to a file [closed]

Linux noobie here, I'm still figuring things out as I move along. At my school we have a shared server environment where every student gets an account. But we have very limited permissions. I have a ...
1
vote
0answers
158 views

Cannot write to Apache www directory LAMP

I've got Fedora 16 running Apache, PHP & MySQL. I want to do 2 things: Share a directory within the www directory over Samba Use CMS systems that have automatic install/configure scripts I've ...
0
votes
2answers
497 views

How to set ownership on a webserver

We have an internal server where we work on with 3 users. It is running ubuntu with apache mysql proftpd We often have permission errors. Sometimes we can't overwrite files but we can delete them ...
0
votes
1answer
1k views

How to make sure www directory is secure?

I managed to order a new VPS account from linode I have installed Ubuntu 10.04 LTS with 'LAMP Stack' StackScript. I notice the website directory is located in /srv/www/ and I thought this is quite ...
82
votes
4answers
52k views

What permissions should my website files/folders have on a Linux webserver?

This is a Canonical Question about File Permissions on a Linux web server. I have a Linux web server running Apache2 that hosts several websites. Each website has its own folder in /var/www/. ...
1
vote
1answer
132 views

Make a file accesible by PHP but not from the outside

My host gives me two folders for my use, a /home/public/ which is where the pages go, and /home/private/, which is for my personal use. I would like for PHP to create a file that's readable by me from ...
0
votes
3answers
1k views

How do I change the user that the Apache web server runs under in CentOS?

I have one directory called apps/cache. When a script writes some files to that directory those files are owned by the nobody user. Of course, then those files and folders are not editable by any ...
0
votes
1answer
314 views

Deploying content to web server with rsync: permissions

I have a Ubuntu 10.04 server running nginx with nginx running as user nginx. I'm trying to deploy an Octopress-based site with rsync and have stumbled on what looks like a security dilemma. ...
3
votes
5answers
8k views

is it safe to chmod 775/664 with owner www-data:www-data?

To make working with my webserver easiest I am proposing doing something like the following: sudo chown www-data:www-data /var/www -R cd /var/www sudo find . -type f -exec chmod 664 {} \; sudo find . ...
0
votes
1answer
320 views

Site not picking up CSS styles when LIVE

I am using ASP.NET 3.5. For some reason when I apply CSS to my controls on my plain form it shows in Visual Studio and it does work fine. But for some reason when I make my site LIVE none of the ...
0
votes
4answers
325 views

Webserver and PHP File Security

I'm trying to figure the right security settings for the files on my shared webserver and I have a few basic questions that I've not figured out by looking around. How do I stop people reading my PHP ...
0
votes
1answer
564 views

Apache Permission denied problem on OS X

I get the following log error when I try to run my website locally on my OS X Snow Leopard: [error] [client 127.0.0.1] (13)Permission denied: access to / denied I have enabled the virtual hosts and ...
1
vote
0answers
207 views

can't view images stored on mounted network drive on linux webserver

I have a network drive mounted at /home/lv_admin/uslonsnas001 where I have stored images. The mount point and all sub folders have rwx mod 775 privileges. My PHP script moves the images to this mount ...
1
vote
2answers
141 views

Howto separately manage IIS permissions?

Question: I need to give a user (developer) permission to restart IIS add applications copy websites to inetput/wwwroot change IIS settings The user does and may NOT have admin rights, as this ...
1
vote
1answer
123 views

Permissions for user on linux machine to host website

I have root access to my hosted machine. I have created a user account 'abcd' and the user's directory is: /home/abcd/public_html In httpd.conf i have: <VirtualHost *:80> ServerName ...
2
votes
1answer
297 views

Securing an Apache Setup with a Fresh Ubuntu Web Server with users and permissions

I have a virtual Server with Ubunto 10.04 on. My host Mediatemple have a few guides on trying to secure the apache config, but I think they are missing some details, or at least it makes no sense to ...
0
votes
1answer
907 views

Access Denied on LAN IIS Access via Integrated Authentication

I have an IIS 7.5 (Win2k8R2) Webserver, which publishes an UNC Share (on a Fileserver) with restricted access. The AppPool Identity is a Domain User-Account with read access to mentioned UNC path. ...
0
votes
1answer
117 views

Multiple web devs pushing code to a live site

I want to start using a version control system (git) to manage having multiple website developers working on websites. This way, we can all see who made what changes and at what time. I did some ...
3
votes
2answers
604 views

How do I mange permissions for multiple users editing the same code on my server?

I have a server that a few different coders will be using to work on various websites. Each coder will need to have access to each website. There's two 'clean' methods I've come up with to do this ...
3
votes
3answers
461 views

Difference between 'apache' and 'www' users?

I'm configuring Apache 2 on CentOS 4 (roughly equivalent to Red Hat). There are two users related to security for httpd: apache and www. It seems to me that apache is the user the web server actually ...
1
vote
2answers
3k views

Nginx not working properly on subdomains [SOLVED]

I've been trying to setup a Sugar CRM instance. I've got a domain that has its main site on a server (www.domain.com) and I've created a subdomain (sugar.domain.com), but I wnat this subdomain to be ...
0
votes
1answer
340 views

setting permissions in user's home folder, to stop a 403 error

In my root folder on my school account I have a bunch of files and folders, e.g., $ ls foobar.txt Private Public www By default, all the files in Public/ and www/ are viewable on the web ...
0
votes
1answer
54 views

Chrome lets me access files on a server, but both firefox and safari claim they're protected?

I have a webserver where navigating to html or xml pages with Chrome causes no problems, but I get a uname/password security prompt if I try to access the same links from either firefox or safari? ...
-1
votes
1answer
2k views

Apache config: Permissions, Directories and Locations

I'm trying to get my head around apache configuration to fix a problem I'm having but after a few hours I've decided to ask here. This is what I've got at the moment: DocumentRoot "/var/www/html" ...
3
votes
3answers
120 views

Security Dangers of Loose Permissions

To an extent, I understand the purpose of limiting permissions to just what is needed, but I don't have a complete grasp of the possible dangers of having them open. I'm most concerned with web ...
5
votes
2answers
648 views

What is the proper way to set up the Apache document root in terms of privileges?

I have just installed Ubuntu 9.10 server edition on my machine and I wish to run my own personal local server with other users in the same LAN. First, I was wondering what folder directory structure ...
0
votes
1answer
3k views

postfix configuration

failed to start the postfix service output given was postfix: fatal: config variable inet_interfaces: host not found: all And my main.cf file is # Global Postfix configuration file. This file ...
1
vote
2answers
548 views

Is it safe to make the wwwroot folder writeable?

I am trying to use IIS7 web server. I found out that I cannot edit (or create) files in this directory. The reason for that is that this directory has read-only permissions. I could change this ...
1
vote
2answers
1k views

How to check and change permissions of files and folders for web server in windows?

I have installed Apache server on Windows 7. When I try to access the server by its IP address I get in Chrome: Forbidden You don't have permission to access / on this server. In IE I ...
2
votes
2answers
3k views

What should the permissions be on a website in IIS7?

Okay, let me just say I have little idea of what I'm doing here. Sorry if I'm making this more complicated than it needs to be, I have a website that I've been setting up on IIS6 for awhile now, it ...
0
votes
1answer
488 views

Webserver HTML folder Permissions

I am running lighttpd and I have the root directory of my website in my user home folder. I would like to serve the website, but not allow other users on the machines to view my home folder or the ...
1
vote
1answer
320 views

What user should an application pool bound to a Wordpress site use in IIS? [duplicate]

I've installed a wordpress site in a dedicated server with Windows 2008 server running IIS7 but I'm a little confused on what's the most secure way to set the appropriate file settings. The thing is ...
0
votes
2answers
267 views

Editing as wwwrun

Let's say you have a web server where the htdocs and everything in it is owned by the apache daemon, wwwrun and it's group, www. What's the best way to set up an external web editor such as Bluefish ...