Go Back   HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials > ISPConfig 3 > General

Do you like HowtoForge? Please consider supporting us by becoming a subscriber.
Reply
 
Thread Tools Display Modes
  #1  
Old 30th April 2013, 13:18
helptec helptec is offline
Junior Member
 
Join Date: Apr 2013
Location: Italy
Posts: 6
Thanks: 1
Thanked 0 Times in 0 Posts
Default restore website permissions on update not working

Hi,
since i have updated from ispconfig 3.0.4.6 to 3.0.5.1 is not working the feature that automatically restores correct ownership and permissions of website files on each update of website configuration in admin panel.

Looking for info with google and in this forum i've found that someone says to
  • check "Set folder permissions on update" option
  • uncheck "Make web folders immutable"
  • resync all

i've tried but still not working
what should i do?
Thanks
Luca
Reply With Quote
Sponsored Links
  #2  
Old 30th April 2013, 16:31
till till is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 35,763
Thanks: 821
Thanked 5,331 Times in 4,183 Posts
Default

The function works fine in 3.0.5.2. Why do you think that your current permissions are wrong? Are you aware that the permission scheme from 3.0.4.6 to 3.0.5.0 has been changed, so the permissions have to be different now.

Quote:
uncheck "Make web folders immutable"
I wont do that if you host customers on the server. This feature is required to keep your website secure, thats why it ios enabled by default.
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
  #3  
Old 30th April 2013, 16:53
helptec helptec is offline
Junior Member
 
Join Date: Apr 2013
Location: Italy
Posts: 6
Thanks: 1
Thanked 0 Times in 0 Posts
Default

normally when a website is created are applied this permissions and ownership

Code:
ls -l /var/www/test.tsa.com/web
total 24
drwxr-xr-x 2 web32 client3 4096 Apr 30 16:39 error
-rwxr-xr-- 1 web32 client3 7358 Apr 30 16:39 favicon.ico
-rwxr-xr-- 1 web32 client3 1861 Apr 30 16:39 index.html
-rwxr-xr-- 1 web32 client3   14 Apr 30 16:39 robots.txt
drwxr-xr-x 2 root  root    4096 Apr 30 16:39 stats
and it's ok

now, for example, i do this:

Code:
chown -R root:root index.html
chmod  -R 777 index.html
chmod  -R 777 robots.txt
and i get this

Code:
drwx--x--- 4 web32 client3 4096 Apr 30 16:39 ./
drwxr-xr-x 9 root  root    4096 Apr 30 16:39 ../
drwxr-xr-x 2 web32 client3 4096 Apr 30 16:39 error/
-rwxr-xr-- 1 web32 client3 7358 Apr 30 16:39 favicon.ico*
-rwxr-xr-- 1 web32 client3   26 Apr 30 16:39 .htaccess*
-rwxrwxrwx 1 root  root    1861 Apr 30 16:39 index.html*
-rwxrwxrwx 1 web32 client3   14 Apr 30 16:39 robots.txt*
drwxr-xr-x 2 root  root    4096 Apr 30 16:39 stats/
In version 3.0.4.6, updating website configuration results in a restore of permissions and ownership to the original scheme.

In version 3.0.5.1 don't.

Quote:
Are you aware that the permission scheme from 3.0.4.6 to 3.0.5.0 has been changed, so the permissions have to be different now.
Ok the permission scheme has changed.
But it means that files owned by web32 or owned by root now is the same thing?
Reply With Quote
  #4  
Old 30th April 2013, 17:14
till till is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 35,763
Thanks: 821
Thanked 5,331 Times in 4,183 Posts
Default

Quote:
But it means that files owned by web32 or owned by root now is the same thing?
No.Just some folders that were owned by web user in prior versions are now owned by the root user.

Quote:
In version 3.0.4.6, updating website configuration results in a restore of permissions and ownership to the original scheme.
In version 3.0.5.1 don't.
ISPConfig 3.0.5 does not change the ownership of files owend by root to the web user, it corrects only folder permissions and will change e.g. the client group to the new group if you assign the site to a different client. The reason is that the old behaviour could have been misused to get access to sensitive files under some circumstances.
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
  #5  
Old 30th April 2013, 17:33
helptec helptec is offline
Junior Member
 
Join Date: Apr 2013
Location: Italy
Posts: 6
Thanks: 1
Thanked 0 Times in 0 Posts
Default

Quote:
The reason is that the old behaviour could have been misused to get access to sensitive files under some circumstances.
Ok, so i was considering a feature something that was a bug...

But in case something goes wrong will be useful to have a "restore website permissions" function in admin panel that could be runned once.

Should i post this in "Feature requests" section?
Reply With Quote
  #6  
Old 30th April 2013, 17:45
till till is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 35,763
Thanks: 821
Thanked 5,331 Times in 4,183 Posts
Default

Quote:
But in case something goes wrong will be useful to have a "restore website permissions" function in admin panel that could be runned once.

Should i post this in "Feature requests" section?
Yes, this would be a useful tools indeed. Please post a feature request in the bugtracker:

http://bugtracker.ispconfig.org
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
The Following User Says Thank You to till For This Useful Post:
helptec (30th April 2013)
  #7  
Old 30th April 2013, 18:06
helptec helptec is offline
Junior Member
 
Join Date: Apr 2013
Location: Italy
Posts: 6
Thanks: 1
Thanked 0 Times in 0 Posts
 
Default

Quote:
Please post a feature request in the bugtracker
Submitted with id FS#2926
Thanks
Bye
Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Vhosts...conf not synced to changes crypted General 50 24th April 2010 00:54
Urgent! pop server down, website down, ispconfig working gwa7 Installation/Configuration 4 8th November 2008 18:56
spamassassin stop working after woody to sarge update shark_tico Server Operation 1 19th October 2006 14:01
Website of Created User not working and Webmail Login Problem techman83 Installation/Configuration 5 28th February 2006 15:05
Website of Created User not working and Webmail Login Problem techman83 Installation/Configuration 1 27th February 2006 23:44


All times are GMT +2. The time now is 07:09.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.