Go Back   HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials > ISPConfig 3 > Installation/Configuration

Do you like HowtoForge? Please consider supporting us by becoming a subscriber.
Reply
 
Thread Tools Display Modes
  #1  
Old 17th April 2009, 18:32
gkovacs gkovacs is offline
Member
 
Join Date: Jan 2009
Location: Budapest, Hungary
Posts: 47
Thanks: 5
Thanked 0 Times in 0 Posts
Default Question about web/ folder permissions

I have a problem with self installing php software: generally, PHP runs under the www-data user, but the files uploaded by users are owned by webN.clientN, and writing/directory creation is not enabled for others, so the self-installing scripts (that create files and folders) fail... unless I manually chmod 777 to the web folder, which stinks from far away as a security hole.

Is there a way to setup ISPConfig to:
- have the correct permissions in place so www-data can write/create folders without root intervention
- at the same time not expose the files to all other users on the system?
Reply With Quote
Sponsored Links
  #2  
Old 17th April 2009, 22:16
till till is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 35,678
Thanks: 819
Thanked 5,318 Times in 4,171 Posts
Default

You selected the wrong way of php integration in the site settings. You have to select suphp or php-fcgi + suexec when the php scripts shall be executed under the permissions of the website owner.
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
  #3  
Old 17th April 2009, 22:52
gkovacs gkovacs is offline
Member
 
Join Date: Jan 2009
Location: Budapest, Hungary
Posts: 47
Thanks: 5
Thanked 0 Times in 0 Posts
Default

Thanks for the insight.

Quote:
Originally Posted by till View Post
You selected the wrong way of php integration in the site settings. You have to select suphp or php-fcgi + suexec when the php scripts shall be executed under the permissions of the website owner.
Problem is, many of my hosted applications are not compatible with fcgi, therefore I have to use mod_php.

1. Is SuExec compatible with mod_php?
2. Does the SuPHP option work out of the box (only by selecting it) or do I have to install/configure software?
3. Is SuPHP secure by itself, or do I have to turn on SuExec as well?
4. Is there a way to easily modify these existing sites or I can only select PHP mode when creating a new site?

Last edited by gkovacs; 17th April 2009 at 23:21.
Reply With Quote
  #4  
Old 18th April 2009, 15:42
falko falko is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 41,701
Thanks: 1,900
Thanked 2,739 Times in 2,574 Posts
 
Default

Quote:
Originally Posted by gkovacs View Post
1. Is SuExec compatible with mod_php?
mod_php has nothing to do with suExec.

Quote:
Originally Posted by gkovacs View Post
2. Does the SuPHP option work out of the box (only by selecting it)
If you set up your server according to our tutorials, then yes.
Quote:
Originally Posted by gkovacs View Post
3. Is SuPHP secure by itself
Yes.
Quote:
Originally Posted by gkovacs View Post
or do I have to turn on SuExec as well?
No.
Quote:
Originally Posted by gkovacs View Post
4. Is there a way to easily modify these existing sites
Yes, you can switch the PHP modes easily in ISPConfig.
__________________
Falko
--
Download the ISPConfig 3 Manual! | Check out the ISPConfig 3 Billing Module!

FB: http://www.facebook.com/howtoforge

nginx-Webhosting: Timme Hosting | Follow me on:
Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
chroot and folder permissions newmember Installation/Configuration 2 25th December 2008 11:18
Web Root permissions DualFusion Installation/Configuration 2 19th July 2008 22:31
How to install zabbix in web folder steve1084 HOWTO-Related Questions 7 31st July 2007 13:30
Quick question regarding domain names web folder Fintan Moloney General 2 24th May 2007 10:02
get thousands of "Mailsize" mails from own server torusturtle Installation/Configuration 20 24th December 2006 14:51


All times are GMT +2. The time now is 00:31.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.