Hello everyone,
I'm not sure if this is the correct forum for this, and apologies for the length of this question, but I'm desperate for some good advice...
I'm in way over my head with file permissions. The directory and files are sitting on a linux server. I know almost nothing about linux.
The background: I was given a web share by my IT admin. Initially, the web share had 3 users, myself (as the owner) ,root (the group) and everyone. I could copy and paste from my local folder to the web share when at work no problem. But I needed to be able to upload files from home over the web. Whatever the permissions were originally set to, wouldn't let me. So I changed permissions to five Full Control to "everyone", which let me upload. So now, "myself" and "everyone" have Full Control and "root" has partial control.
I then found a webadmin file which listed directory contents etc via the web and allowed me to upload, delete, view etc the files in my directories. I have noticed now that when I copy/paste files as originally, the file permission is set to 764 and the owner is set as "myself", which I assume is correct. But, when I upload the same file using the webadmin via the web, the file permission is set to 644 (according to the settings within the webadmin file) and the owner becomes "www-data".
Also, I notice that on the webadmin, any file that has permissions set as 600,755 or 644 allows me to change those permissions, but any file whose permissions are 764 will not allow me to change those permissions.
I am really confused and worried. My questions, in order of importance:
1) Have I massively compromised the security of my files by changing "everyone" permission to full control?
2) What should my directories and files have permissions set to in order to allow me to upload over the web but not compromise security?
3) For my directory, I assume the "myself" group should have full control. How much control should the other groups have?
4) Why are the permissions of the 764 not changeable but the 600,755 and 644 are?
5) When I upload a file via the web, why does the owner change to "www-data"?
If anyone could possibly spare the time to help me out, I would really be grateful. Thanks.
1  2225   Nepomuk 3,112
Recognized Expert Specialist
Hi! I don't know, if this is still an issue, but I thought I'd answer those of your questions that I can answer.
1) Have I massively compromised the security of my files by changing "everyone" permission to full control?
Probably, yes.
2) What should my directories and files have permissions set to in order to allow me to upload over the web but not compromise security?
Ideally I would say, no access to your directories at all, but reading access will possibly be vital. So use
to allow the "others" to only read those files.
3) For my directory, I assume the "myself" group should have full control. How much control should the other groups have?
Check my answer to 2).
4) Why are the permissions of the 764 not changeable but the 600,755 and 644 are?
I don't understand that - as far as I understand the modes, 764 should mean: 7 = the owner have reading, writing and execution access
6 = the owning group has reading and writing access
4 = the others have reading access As long as that file belongs to you (check with ls -l), it should work.
5) When I upload a file via the web, why does the owner change to "www-data"?
That's the user running the web service. As this user "creates" the files on the server, he's the owner.
There, I hope that helps a bit.
Greetings,
Nepomuk
Sign in to post your reply or Sign up for a free account.
Similar topics | |
by: Catherine Jo Morgan |
last post by:
I'm making a db for a client whose clients often share a household. For
example, one household member may become a client, with one or more others
becoming clients later. So I have a table for People and another for
Households - so that mailings can go to a household and not be duplicated.
What if each person in the household sets mailing permissions differently?
One says "yes, send me news of new events" and another says "no, don't...
|
by: Mike MacSween |
last post by:
I'm not talking Access Users & Groups, I may or may not implement that. Even
if I do file/folder rights still need to be managed.
I've searched the archives and read the many postings. The basic problem
seems to be this:
Access is a 'file server' based system. So if you want your users to use the
db they've got to have access to the file. And can do stuff to it you might
not want.
|
by: MSDN Account |
last post by:
We have web site that used the IIS ResKit tool MSWC.PermissionChecker to
check file permissions. The web site has been upgraded and that upgrade
included changing the default server side language from VBScript to C#
(*.vbs --> *.cs).
Does C# have a native method for doing what MSWC.PermissionChecker used to
do?
If so has anyone gone through converting the MSWC.PermissionChecker method
to C# and would they share what they did?
If not...
|
by: Carl Gilbert |
last post by:
Hi
I am trying to get an online gallery (www.ngallery.org - open source) to
upload image to a folder. At the moment I am using localhost but plan to
move to some web space when I get it all working.
I need to update my 'images' folder permissions so the ASP.NET worker
process has write permissions.
However, when I go to the folder permissions, there is not worker process
|
by: Wayne Wengert |
last post by:
I am trying to execute a file upload of a file but I ghet the error shown
below. I do have MyMachine\ASPNET permission set but I am using IIS6 and
the error information indicates that the base process identity is "Network
Service" in that case but I cannot find any such identity? How can I grand
the necessary access?
Wayne
============================================================
Exception Details:...
| | |
by: Alex Maghen |
last post by:
Hi.
I am really confused about the NTFS permissions that I must set for my
ASP.NET 2.0 IIS application to work properly. I have looked at KB:815153 and
that helps a *little* bit, but I need more. The following are my specific
questions. If someone could answer them for me, I'd REALLY appreciate it!
1. I do not necessarily pre-compile my site to DLLs. I want it to build
automatically if it needs to. In KB:815153, it talks about the...
|
by: Fred W. |
last post by:
When my application starts I need to check folder permissions to ensure they
have "Full Control" before I let them proceed on. How can I check this
permission. Thank you, Fred
|
by: Adam Baker |
last post by:
Hello,
I'm writing a site where a handful of people will be able to edit
the content using PHP scripts (FCKeditor). The content is stored as
individual files in a directory. I'd like to validate the "editors"
using PHP, cookies, etc.
The question is what file permissions I need to allow for the
content to be writable by my PHP script. Do I really need to give
write permissions to the "other" group. Are all wikis really that
vulnerable?...
|
by: beary |
last post by:
Hello everyone,
I posted this in unix/linux but it received no replies, so I assume it was the wrong forum. I'm trying here.
I'm in way over my head with file permissions. The directory and files are sitting on a linux server. I know almost nothing about linux.
The background: I was given a web share by my IT admin. Initially, the web share had 3 users, myself (as the owner) ,root (the group) and everyone. I could copy and paste from my...
|
by: jinu1996 |
last post by:
In today's digital age, having a compelling online presence is paramount for businesses aiming to thrive in a competitive landscape. At the heart of this digital strategy lies an intricately woven tapestry of website design and digital marketing. It's not merely about having a website; it's about crafting an immersive digital experience that captivates audiences and drives business growth.
The Art of Business Website Design
Your website is...
|
by: Hystou |
last post by:
Overview:
Windows 11 and 10 have less user interface control over operating system update behaviour than previous versions of Windows. In Windows 11 and 10, there is no way to turn off the Windows Update option using the Control Panel or Settings app; it automatically checks for updates and installs any it finds, whether you like it or not. For most users, this new feature is actually very convenient. If you want to control the update process,...
| | |
by: agi2029 |
last post by:
Let's talk about the concept of autonomous AI software engineers and no-code agents. These AIs are designed to manage the entire lifecycle of a software development project—planning, coding, testing, and deployment—without human intervention. Imagine an AI that can take a project description, break it down, write the code, debug it, and then launch it, all on its own....
Now, this would greatly impact the work of software developers. The idea...
|
by: isladogs |
last post by:
The next Access Europe User Group meeting will be on Wednesday 1 May 2024 starting at 18:00 UK time (6PM UTC+1) and finishing by 19:30 (7.30PM).
In this session, we are pleased to welcome a new presenter, Adolph Dupré who will be discussing some powerful techniques for using class modules.
He will explain when you may want to use classes instead of User Defined Types (UDT). For example, to manage the data in unbound forms.
Adolph will...
|
by: conductexam |
last post by:
I have .net C# application in which I am extracting data from word file and save it in database particularly. To store word all data as it is I am converting the whole word file firstly in HTML and then checking html paragraph one by one.
At the time of converting from word file to html my equations which are in the word document file was convert into image.
Globals.ThisAddIn.Application.ActiveDocument.Select();...
|
by: TSSRALBI |
last post by:
Hello
I'm a network technician in training and I need your help.
I am currently learning how to create and manage the different types of VPNs and I have a question about LAN-to-LAN VPNs.
The last exercise I practiced was to create a LAN-to-LAN VPN between two Pfsense firewalls, by using IPSEC protocols.
I succeeded, with both firewalls in the same network. But I'm wondering if it's possible to do the same thing, with 2 Pfsense firewalls...
|
by: adsilva |
last post by:
A Windows Forms form does not have the event Unload, like VB6. What one acts like?
|
by: 6302768590 |
last post by:
Hai team
i want code for transfer the data from one system to another through IP address by using C# our system has to for every 5mins then we have to update the data what the data is updated we have to send another system
| | |
by: muto222 |
last post by:
How can i add a mobile payment intergratation into php mysql website.
| |
