Hi Everyone,

What would be causing the file privileges for "group" and "world" to change on
a directory?  For example, the security on /home/ftp_data changed from
"drwxrwxrwx" to "drwxr-xr-x" even though no one did a "chmod" (or anything
else) to that directory.

Here are the steps that were taken for this directory.  Note: We need "write"
privileges for "world" since we are FTP'ing some data into this file from a CGI
script.

1. Log on as "root"
2. cd /home
3. chmod 777 ftp_data
4. "ls -l" shows: drwxrwxrwx    2 root     root         4096 Oct 17 10:07
ftp_data/
5. Ran the CGI script that ftp's data into "ftp_data".
6. After CGI script finishes, did  "ls -l ftp_data"
-rw-r--r--    1 apache   apache       4281 Oct 18 14:20 31789_372474.dat
-rw-r--r--    1 apache   apache       4281 Oct 17 09:37 34389_372474.dat
-rw-r--r--    1 apache   apache       4281 Oct 17 10:07 85592_372474.dat
7. Then did "ls -l" from "/home" directory
drwxrwxrwx    2 root     root         4096 Oct 18 14:20 ftp_data/

So, at this point we are able to see that we allowed "rwx" to "all", were able
run a CGI script that wrote data into the "ftp_data" directory, and then showed
that the  "ftp_data" directory did not change it's privileges after the CGI
script had finished.

7. About 30 minutes later, did another "ls -l" from "/home" and got the
following:
drwxr-xr-x    2 root     root         4096 Oct 18 14:20 ftp_data/
which shows that "group" and "world" have their "write" privileges turned off.
Note: We did not log off from "root" during this time.

We do not have any "cron" jobs running, so we cannot think of any reason why
the security on this directory keeps changing.

As an FYI, we have another server running where we had made this same exact
security change on "/home/ftp_data", and it has never changed it's settings.


Thank you,
Kathy

Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com

Reply via email to