PHP Safe Mode & Directory Permissions

[domino]

I have 2 questions.

1. Why did it automatically set Safe mode ON, on all my Virtual Servers?
2. Why are the directories default CHMOD 775 and files CHMOD 664?

I'm a bit paranoid about the chmod values. How can I change to CHMOD 755 for folders and CHMOD 644 for files when I create a new Virtual Servers?

[falko]

Why did it automatically set Safe mode ON, on all my Virtual Servers?

Do you mean that the PHP Safe Mode checkbox is already checked when you create a new web site? Then I guess you've defined a hosting template that has Safe Mode on.
Otherwise I think you have Safe Mode on in your php.ini.

Why are the directories default CHMOD 775 and files CHMOD 664?
That's because under Sendmail procmail recipes aren't executed if the parent directories don't have 775. I think it's different with Postfix, but I'm not 100% sure, so I wouldn't try to change the permissions as your mail delivery might fail afterwards.

[domino]

Do you mean that the PHP Safe Mode checkbox is already checked when you create a new web site?


Yea, thats why. I wasn't paying attention with checking the 3 domain's feature boxes. This is a new box Debian box this time :). Thanks for reminding me that I need thicker glasses.

That's because under Sendmail procmail recipes aren't executed if the parent directories don't have 775. I think it's different with Postfix, but I'm not 100% sure, so I wouldn't try to change the permissions as your mail delivery might fail afterwards.

I'm using postfix and isn't it a secuiry risk to have the "web" folder with that type of permission? I'm not claiming it is. It's just I'm used to having folder at 755 and files at 644.

[till]

I'm using postfix and isn't it a secuiry risk to have the "web" folder with that type of permission? I'm not claiming it is. It's just I'm used to having folder at 755 and files at 644.

Every web has ist own group and the folder is owned by that group.

[domino]

If no one else objects I'll take your word for it :). It's just that a certain Gallery script will not let me continue the installation unless the "web" permissions are set to 755. :(. So dump the script?

[falko]

If no one else objects I'll take your word for it :). It's just that a certain Gallery script will not let me continue the installation unless the "web" permissions are set to 755. :(. So dump the script?

You can chmod the web folder to 755. :)

[domino]

You can chmod the web folder to 755.

I will do that. Is chmod 775 / 664 a requirement for postfix? If no, where can I set the perams for changing it? I want to make it a default 755 folders / 644 files whenever I create an new site in ISPC and upload/create things through FTP client. Is that possible given the current environment and applications installed?

[falko]

I will do that. Is chmod 775 / 664 a requirement for postfix? If no, where can I set the perams for changing it? I want to make it a default 755 folders / 644 files whenever I create an new site in ISPC and upload/create things through FTP client. Is that possible given the current environment and applications installed?

You can change the function make docroot() in /root/ispconfig/scripts/lib/config.lib.php. There all chmods are done. :)

[domino]

Thank you for the pointing it out. I have my peice of mind now that my idiot friends and brother can install whatever they like :).

PS. Oh I sure wished quick reply was enabled on this board :D

[hairydog2]

Thank you for the pointing it out. I have my peice of mind now that my idiot friends and brother can install whatever they like :).

PS. Oh I sure wished quick reply was enabled on this board :D
It is! Click the button to the right of the Quote button

[falko]

It is! Click the button to the right of the Quote button
It wasn't enabled when domino posted that. It has been enabled in the meantime. ;)