725 reputation
719
bio website bitdepth.thomasrutter.com
location Australia
age 34
visits member for 5 years, 3 months
seen Jul 20 at 1:53

Web application developer by day who has also dabbled in audio, video and image tools.


May
13
answered gzip, deflate are not showing while accessing from a proxy
May
9
answered How to understand /etc/mtab?
May
9
comment How to redirect all mail from one domain to another in Postfix?
Thanks, this looks right.
May
8
accepted How to redirect all mail from one domain to another in Postfix?
May
6
revised How to redirect all mail from one domain to another in Postfix?
added 92 characters in body; added 3 characters in body
May
6
asked How to redirect all mail from one domain to another in Postfix?
Apr
9
comment What User Should NGinx and PHP be running as?
The reason for www-data is that it is an account with zero privileges - it cannot write to any file on the entire file system, not read to anything but world-readable files. Previously, you would use built-in user "nobody" to achieve this. However, by creating "www-data" you have the possibility to allow this user to write to some files, without having to make those files world-writable (which is bad). The basic principle, that "www-data" is as privileged as "nobody" in every other way, holds true.
Apr
5
comment which disto to pick for Linode?
Mandrake or Fedora for a server??
Mar
25
accepted Clarify something about Linux directory permissions
Mar
25
comment Clarify something about Linux directory permissions
Thanks Wes for your answer - it was helpful as well
Mar
24
comment Clarify something about Linux directory permissions
Thanks JeffG, I understand that with a soft link, they would be, but with a hard link or bind mount, they don't - so hard links and bind mounts can bypass this, but then a regular user wouldn't be able to create a hard link or bind mount into there anyway.
Mar
22
revised Clarify something about Linux directory permissions
added 50 characters in body
Mar
22
comment Clarify something about Linux directory permissions
Sorry packs, but I was trying to ask a question a bit different to the one you answered. I already suspect that the lack of read or execute permissions on the directory would prevent access to its files regardless of the file permissions. I was wondering if this was definitive or if there were still ways for other users to read the files. JeffG's answer helped me out, for example. I will try to clarify my question.
Mar
22
asked Clarify something about Linux directory permissions
Mar
22
comment Securing /var/www
This answer sounds like a good solution to me - can anyone tell me any downsides?
Mar
4
comment How long does a blocked connection from Iptables last? Is there a way to set the timeout?
It's more like "If there are 15 connections, and the last one was less than 5 seconds ago" according to my interpretation of the docs. Not all 15 connections would need to have been within the last 5 seconds.
Feb
15
comment Is there an alternative to /dev/urandom?
Actually shred is much faster than /dev/urandom. My guess is it provides its own pseudorandom data using /dev/urandom or /dev/random as a seed.
Feb
10
comment Is there a way to reduce the avarage time it takes to fsck a device?
Well, fsck.xfs basically just returns success without doing anything. There are xfs_check and xfs_repair utilities for when you need them.
Oct
14
answered Web Server Hardware - What Do I Need?
Oct
14
answered Safe way to allow users to chgrp to www-data