Mailing List Archive

File permissions?
Hi,

We run a web server and some of our users keep
up to date it via scp.
What is the best file permission to enable those
users to overwrite the old pages, but not to allow
any other to delete the pages?

I think I should create a 'users' group, put them in
this group and then change the ownership of the files
from root.root to root.users and the permission of
the files from 600 to 660.

What do you think? Won't it be a big security hole?
How do the others solve this problem?

Thanks in advance!

Regards;

Istvan

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: File permissions? [ In reply to ]
Hi Istvan,
Have you looked into WebDAV for letting the users update their documents?
We use that and it is very convenient. Offcourse WebDAV will not work in
all situations. If you have specific questions about WebDAV please feel
free to email me.

Saqib Ali
=======================
http://www.stonebeat.org <- WebDAV Documentation Project



"Takacs Istvan"
<istvan.takacs@h To: "apache (Elektronikus levelek)" <users@httpd.apache.org>
ungax.com> cc:
Subject: File permissions?
02/05/2002 08:45
AM
Please respond
to users






Hi,

We run a web server and some of our users keep
up to date it via scp.
What is the best file permission to enable those
users to overwrite the old pages, but not to allow
any other to delete the pages?

I think I should create a 'users' group, put them in
this group and then change the ownership of the files
from root.root to root.users and the permission of
the files from 600 to 660.

What do you think? Won't it be a big security hole?
How do the others solve this problem?

Thanks in advance!

Regards;

Istvan

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org





---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org