Re: permissions for www acting strangely

Steve Franks wrote:
Few weeks ago, I installed apache22. Just wanted to put up some
family photos. Whenever I tried to connect, got a "apache doesn't
have permisson to acess ~/. on this system or somesuch". The only way
to get around it appeared to be a chmod 777 on my pic folder (no luck
with 775!). Now I restored some stuff from a backup over my photos,
and now 777 won't work either. Is there something fundamental about
permissions I am totally missing?
Look at your apache config file. Most probably, /usr/local/etc/apache22/httpd.conf.

Look for "User" and "Group" options - it tells you the user and group apache is running under.

Now look at the ownership of your files and directories. Apache needs to have rx on directories and r on file to read them.

One common approach for this problem is to set the "set group id" bit on your folder containing your photos, and do

chown user1:group1 -R yourfolder


Where:

user1 - can be you (?)
group1 - should be the group apache is running under


Well, it is just a bad example. You need to develop your own strategy for security. They key is that you also need to check ownership. It is not enough to chmod, sometimes you need to chown.

Best,

Laszlo


_______________________________________________
freebsd-questions@xxxxxxxxxxx mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscribe@xxxxxxxxxxx"

Relevant Pages

  • Re: permissions for www acting strangely
    ... family photos. ... permisson to acess ~/. ... Apache runs as user www. ... So this user needs one way or the ...
    (freebsd-questions)
  • Re: How to get Apache to write files as group writable?
    ... >> Paul. ... > the group apache runs as from apache to www (or whatever group you ... using the SGID bit on a directory, the GID of newly-created files will ...
    (Fedora)
  • Re: apache document root on mounted drive on FC5
    ... can be properly accessed through samba. ... of these as the apache document root, but whatever it tries to serve up ... as I move the document root back to /var/www/html, ... If they are not owned by ether user or group apache, ...
    (Fedora)
  • Re: change directory GID to -1
    ... > I want the group Apache is part of, to have some specific permission on ... You really sure the GID is -1? ... you can't set the gid of a file/directory to "-1", in setregid() a program ... You would be better off changing the Apache group to a new value that is NOT ...
    (alt.linux)
  • Re: need your help
    ... recently i found that my apache not starting and found that it was ... i found that there was a group apache when i say ... i changed in httpd.conf file the user to nobody n grp to nobody ... - their life, your story. ...
    (RedHat)