HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials

HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials (http://www.howtoforge.com/forums/index.php)
-   General (http://www.howtoforge.com/forums/forumdisplay.php?f=25)
-   -   restore website permissions on update not working (http://www.howtoforge.com/forums/showthread.php?t=61664)

helptec 30th April 2013 14:18

restore website permissions on update not working
 
Hi,
since i have updated from ispconfig 3.0.4.6 to 3.0.5.1 is not working the feature that automatically restores correct ownership and permissions of website files on each update of website configuration in admin panel.

Looking for info with google and in this forum i've found that someone says to
  • check "Set folder permissions on update" option
  • uncheck "Make web folders immutable"
  • resync all

i've tried but still not working
what should i do?
Thanks
Luca

till 30th April 2013 17:31

The function works fine in 3.0.5.2. Why do you think that your current permissions are wrong? Are you aware that the permission scheme from 3.0.4.6 to 3.0.5.0 has been changed, so the permissions have to be different now.

Quote:

uncheck "Make web folders immutable"
I wont do that if you host customers on the server. This feature is required to keep your website secure, thats why it ios enabled by default.

helptec 30th April 2013 17:53

normally when a website is created are applied this permissions and ownership

Code:

ls -l /var/www/test.tsa.com/web
total 24
drwxr-xr-x 2 web32 client3 4096 Apr 30 16:39 error
-rwxr-xr-- 1 web32 client3 7358 Apr 30 16:39 favicon.ico
-rwxr-xr-- 1 web32 client3 1861 Apr 30 16:39 index.html
-rwxr-xr-- 1 web32 client3  14 Apr 30 16:39 robots.txt
drwxr-xr-x 2 root  root    4096 Apr 30 16:39 stats

and it's ok

now, for example, i do this:

Code:

chown -R root:root index.html
chmod  -R 777 index.html
chmod  -R 777 robots.txt

and i get this

Code:

drwx--x--- 4 web32 client3 4096 Apr 30 16:39 ./
drwxr-xr-x 9 root  root    4096 Apr 30 16:39 ../
drwxr-xr-x 2 web32 client3 4096 Apr 30 16:39 error/
-rwxr-xr-- 1 web32 client3 7358 Apr 30 16:39 favicon.ico*
-rwxr-xr-- 1 web32 client3  26 Apr 30 16:39 .htaccess*
-rwxrwxrwx 1 root  root    1861 Apr 30 16:39 index.html*
-rwxrwxrwx 1 web32 client3  14 Apr 30 16:39 robots.txt*
drwxr-xr-x 2 root  root    4096 Apr 30 16:39 stats/

In version 3.0.4.6, updating website configuration results in a restore of permissions and ownership to the original scheme.

In version 3.0.5.1 don't.

Quote:

Are you aware that the permission scheme from 3.0.4.6 to 3.0.5.0 has been changed, so the permissions have to be different now.
Ok the permission scheme has changed.
But it means that files owned by web32 or owned by root now is the same thing?

till 30th April 2013 18:14

Quote:

But it means that files owned by web32 or owned by root now is the same thing?
No.Just some folders that were owned by web user in prior versions are now owned by the root user.

Quote:

In version 3.0.4.6, updating website configuration results in a restore of permissions and ownership to the original scheme.
In version 3.0.5.1 don't.
ISPConfig 3.0.5 does not change the ownership of files owend by root to the web user, it corrects only folder permissions and will change e.g. the client group to the new group if you assign the site to a different client. The reason is that the old behaviour could have been misused to get access to sensitive files under some circumstances.

helptec 30th April 2013 18:33

Quote:

The reason is that the old behaviour could have been misused to get access to sensitive files under some circumstances.
Ok, so i was considering a feature something that was a bug... :D

But in case something goes wrong will be useful to have a "restore website permissions" function in admin panel that could be runned once.

Should i post this in "Feature requests" section?

till 30th April 2013 18:45

Quote:

But in case something goes wrong will be useful to have a "restore website permissions" function in admin panel that could be runned once.

Should i post this in "Feature requests" section?
Yes, this would be a useful tools indeed. Please post a feature request in the bugtracker:

http://bugtracker.ispconfig.org

helptec 30th April 2013 19:06

Quote:

Please post a feature request in the bugtracker
Submitted with id FS#2926
Thanks
Bye


All times are GMT +2. The time now is 23:06.

Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.