Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #175889

Re: chgrp with user

Show all headers | View raw

[Multipart message — attachments visible in raw view] - view raw

Le tridi 3 nivôse, an CCXXV, Xen a écrit :
> I think my point was more that I didn't know how to chgrp, but I found I
> needed to add myself to www-data first before I could chgrp to it.

Just a basic sanity check:

If your web server is running as www-data, then it is better if the
files do NOT belong to that user and/or group. For the group, it does
not matter much, but for the user it is very important.

Most importantly, the web server must not have write access to the files
it serves.

Some web applications need write access, of course, but they should get
write access ONLY to the files and directories they need, NEVER the
program files. And the web server must be configured to never execute
anything from these directories, if they are served.

For example, if your application is making photo albums, it needs write
access to the directory where it stores the photos, but only that, and
all ScriptAlias or equivalent must be disabled for that directory.

Regards,

-- 
  Nicolas George

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

chgrp with user Xen <list@xenhideout.nl> - 2016-12-22 18:40 +0100
  Re: chgrp with user Dan Ritter <dsr@randomstring.org> - 2016-12-22 20:10 +0100
    Re: chgrp with user Xen <list@xenhideout.nl> - 2016-12-23 01:20 +0100
      Re: chgrp with user Greg Wooledge <wooledg@eeg.ccf.org> - 2016-12-23 14:10 +0100
        Re: chgrp with user Xen <list@xenhideout.nl> - 2016-12-27 12:30 +0100
  Re: chgrp with user deloptes <deloptes@gmail.com> - 2016-12-23 00:50 +0100
    Re: chgrp with user Xen <list@xenhideout.nl> - 2016-12-23 01:20 +0100
      Re: chgrp with user Nicolas George <george@nsup.org> - 2016-12-23 09:40 +0100
        Re: chgrp with user Xen <list@xenhideout.nl> - 2016-12-27 13:30 +0100
          Re: chgrp with user Gene Heskett <gheskett@shentel.net> - 2016-12-27 16:00 +0100
            Re: chgrp with user Xen <list@xenhideout.nl> - 2016-12-27 16:40 +0100
              Re: chgrp with user deloptes <deloptes@gmail.com> - 2016-12-27 21:10 +0100
                Re: chgrp with user Greg Wooledge <wooledg@eeg.ccf.org> - 2016-12-27 22:50 +0100
                Re: chgrp with user Xen <list@xenhideout.nl> - 2016-12-27 23:00 +0100
                Re: chgrp with user Xen <list@xenhideout.nl> - 2016-12-27 23:20 +0100
                Re: chgrp with user Xen <list@xenhideout.nl> - 2016-12-28 13:40 +0100
                Re: chgrp with user deloptes <deloptes@gmail.com> - 2016-12-28 20:20 +0100
                Re: chgrp with user Xen <list@xenhideout.nl> - 2016-12-29 09:10 +0100
                Re: chgrp with user Xen <list@xenhideout.nl> - 2016-12-27 22:50 +0100
  Re: chgrp with user Andy Smith <andy@strugglers.net> - 2016-12-23 15:20 +0100

csiph-web