Not only does /home/frank/www need to be readable by apache, all
parent directories need to be as well.  So what you have is a rather
insecure setup, because the server daemon has access to your home
directory.  More preferable would be to have a directory dedicated to
webapps (on RedHat and derivatives that's /var/www) which is owned by
your web server user (apache) and isolated from any individual user
account.

As you have it right now, the CF installer should be givien 'apache'
for the group to run as.  Also, CF needs write access to various
things within it's webroot, so you'll need to grant it that access.  I
don't have an exhaustive list, but at the very least
/WEB-INF/cfclasses and /WEB-INF/cfusion/lib/ which house compiled CF
templates and the administrator settings respectively.  There are some
more folders related to CFFORM and other stuff as well.

cheers,
barneyb

On Sun, May 8, 2011 at 9:57 PM, Frank Green <[email protected]> wrote:
>
> Hello - I am new to linux configuration:
>
> I am trying to install CF8 on linux but am somewhat confused about 
> permissions.
>
> I am running apache under user "apache", group "apache".
>
> My web root is /home/frank/www
> All files within that are 644, all directories are 755.
> All www files are owned by "frank", group "apache"
>
> As I understand it, this is a good secure setup, which allows apache to read 
> files but not write to these directories.  So far so good, I think.
>
> Now, I am installing coldfusion.  When the CF installer asks for the runtime 
> user, what do I use?  apache?  frank?  some other user?    I have access to 
> root, so changing permissions is easy.  I just want to have a good, secure 
> setup, and I need apache running under "apache" to play nicely with CF.
>
> Thanks for responses
>
>
>
> 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: http://www.houseoffusion.com/groups/cf-linux/message.cfm/messageid:4563
Subscription: http://www.houseoffusion.com/groups/cf-linux/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-linux/unsubscribe.cfm

Reply via email to