It's true that Apache is running under www-data group on Jessie :
root 11718 0.0 3.4 446260 35680 ? Ss 15:03 0:00
/usr/sbin/apache2 -k start
www-data 11722 0.0 1.3 446292 13424 ? S 15:03 0:00
/usr/sbin/apache2 -k start
www-data 11723 0.0 1.3 446292 13424 ? S 15:03 0:00
/usr/sbin/apache2 -k start
www-data 11724 0.0 1.3 446292 13424 ? S 15:03 0:00
/usr/sbin/apache2 -k start
www-data 11725 0.0 1.3 446292 13424 ? S 15:03 0:00
/usr/sbin/apache2 -k start
www-data 11726 0.0 1.3 446292 13424 ? S 15:03 0:00
/usr/sbin/apache2 -k start
www-data 11736 0.0 1.3 446292 13424 ? S 15:03 0:00
/usr/sbin/apache2 -k start
www-data 11740 0.0 1.3 446292 13424 ? S 15:03 0:00
/usr/sbin/apache2 -k start
www-data 11741 0.0 1.3 446292 13424 ? S 15:03 0:00
/usr/sbin/apache2 -k start
www-data 11742 0.0 1.3 446292 13424 ? S 15:03 0:00
/usr/sbin/apache2 -k start
www-data 11743 0.0 1.3 446292 13424 ? S 15:03 0:00
/usr/sbin/apache2 -k start
But on Wheezy, Apache is running under root, so I don't have to give
execute access to the folder :
root 2178 0.2 0.4 363472 44104 ? S 15:33 0:10
/usr/sbin/apache2 -k start
root 2292 0.2 0.4 363472 44104 ? S 15:15 0:13
/usr/sbin/apache2 -k start
root 15009 0.1 0.4 363472 44104 ? S 14:22 0:13
/usr/sbin/apache2 -k start
root 16979 0.0 0.1 337332 17664 ? S févr.17 0:02
/usr/sbin/apache2 -k start
root 23261 0.2 0.4 363472 44104 ? S 16:04 0:05
/usr/sbin/apache2 -k start
root 24872 0.1 0.4 363472 44104 ? S 14:09 0:15
/usr/sbin/apache2 -k start
root 27992 0.2 0.4 363472 44104 ? S 13:50 0:23
/usr/sbin/apache2 -k start
root 28543 0.1 0.4 363472 44104 ? S 15:11 0:09
/usr/sbin/apache2 -k start
root 29159 0.0 0.4 363472 44104 ? S 16:06 0:00
/usr/sbin/apache2 -k start
root 29309 0.0 0.4 363472 44104 ? S 16:07 0:01
/usr/sbin/apache2 -k start
root 29857 0.2 0.4 363472 44104 ? S 16:07 0:04
/usr/sbin/apache2 -k start
root 30088 0.2 0.4 363472 44104 ? S 16:07 0:04
/usr/sbin/apache2 -k start
root 31218 0.2 0.4 363472 44104 ? S 16:08 0:04
/usr/sbin/apache2 -k start
root 32046 0.2 0.4 363472 44108 ? S 16:08 0:04
/usr/sbin/apache2 -k start
Le 23/03/2016 15:52, [email protected] a écrit :
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On Wed, Mar 23, 2016 at 03:48:41PM +0100, Olivier Desport wrote:
Hi Thomas,
I don't want to set 755 permissions to this folder for security
reasons. It worked well like this (750) with Wheezy/Apache 2.2 and I
want to keep my settings.
Whatever "this folder" is ;-)
Anyway, if Apache hasn't read *and* execute access then it won't play
with you.
I don't know what "this" folder is, but if we are talking about
one of the last directories in the path (i.e. /var/www or even
/var/www/portail), then you might consider to set their "group"
to the group Apache is running under, so that permissions 0750
can actually do the trick.
Typically, Apache is running under group apache, but I'd double-
check.
regards
- -- t
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
iEYEARECAAYFAlbyrcAACgkQBcgs9XrR2kaSbACeNxlTetCZVIWDN1at9cGzBr/T
jpEAnRRUHaYSzMRaRnGsn3r5pohXYXbW
=qnCM
-----END PGP SIGNATURE-----
