133 reputation
4
bio website
location Australia
age 32
visits member for 2 years, 2 months
seen Oct 18 at 9:16

Jul
31
awarded  Scholar
Jul
31
accepted HTTP daemon and Webroot permissions
Jul
31
awarded  Commentator
Jul
31
comment HTTP daemon and Webroot permissions
@EDIT: Thanks Lucas, I will take what I can get here.
Jul
31
comment HTTP daemon and Webroot permissions
@MichaelHampton: Trust me, this is not off the table. We are just trying to make it work at this stage.
Jul
31
comment HTTP daemon and Webroot permissions
@EDIT: That was my concern. So what I am after are sources that support this opinion and concern. I suppose I could use this post to support my concern but are you able to quote and sources?
Jul
31
comment HTTP daemon and Webroot permissions
@lucas: Yes T_T So if you have any documents that highlight this please share.
Jul
31
comment HTTP daemon and Webroot permissions
that's why I am here.
Jul
31
comment HTTP daemon and Webroot permissions
I can give them a captive shell and lock them to a directory. problem is they still dont want to deploy like this. So specifically I need authorative sources to support my position rather than advice.
Jul
31
comment HTTP daemon and Webroot permissions
...also at least there is authentication to access the file system with ssh or ftp(s). Allowing httpd full access to the webroot does not require any authentication by the user.
Jul
31
awarded  Student
Jul
31
comment HTTP daemon and Webroot permissions
scripts need to be run by a process. In this case the process is the httpd
Jul
31
comment HTTP daemon and Webroot permissions
Yes. This is what I have been doing. I open up permissions for them to deploy and then close them again. Though one thing has me confused here, the window they require full access is days; AFAIK web development should not be done on a production server; write it and test on dev environment and then deploy. It should only take minutes as best imo.
Jul
31
comment HTTP daemon and Webroot permissions
Unfortunately I am just a sysadmin. My manager and I agree, but marketing want to hang on to this dev team because they like their work. At this stage we want to keep them but convince them their work practices need to change.
Jul
31
awarded  Supporter
Jul
31
asked HTTP daemon and Webroot permissions