Tag Info

New answers tagged

2

This an artifact with the way windows does permissions: you can't act as a user without knowing the user's password because certain key bits of information are encrypted using the user's password. So this applies to no other operating systems. But the key here is that users have permissions and ownership rights, programs do not. So each application is just ...


0

You are missing the option of ACLs. Linux has a very flexible ACL system that most people don't consider. I wrote up a blog post about this a while ago: http://bryan.ravensight.org/2010/01/linux-acl-management-functions/ I generally set the ownership and group to the shell user and whatever group of interactive users that need to be able to update those ...


1

Having /var/www/site.com owned by www-data:www-data If www-data is also the uid your webserver runs as then you have a really insecure system. The webserver should only have read access (and execute for directories). If you do need to allow the webserver to write data then this directory should be ringfenced - and preferably outside the document root. ...


0

xx4 in folder is more like having xx0, since "others" won't be able to see the contents of that directory. They would see the folder, but won't be able to do anything with it. As the web server probably won't need write permissions, I would use the alexb:www-data with 750 (directories) and 640 (files), as this way reduces privileges for the web server but ...



Top 50 recent answers are included