Have you started and stopped ftp or any service that uses that directory recently? > Hi Everyone, > > What would be causing the file privileges for "group" and "world" to change on > a directory? For example, the security on /home/ftp_data changed from > "drwxrwxrwx" to "drwxr-xr-x" even though no one did a "chmod" (or anything > else) to that directory. > > Here are the steps that were taken for this directory. Note: We need "write" > privileges for "world" since we are FTP'ing some data into this file from a CGI > script. > > 1. Log on as "root" > 2. cd /home > 3. chmod 777 ftp_data > 4. "ls -l" shows: drwxrwxrwx 2 root root 4096 Oct 17 10:07 > ftp_data/ > 5. Ran the CGI script that ftp's data into "ftp_data". > 6. After CGI script finishes, did "ls -l ftp_data" > -rw-r--r-- 1 apache apache 4281 Oct 18 14:20 31789_372474.dat > -rw-r--r-- 1 apache apache 4281 Oct 17 09:37 34389_372474.dat > -rw-r--r-- 1 apache apache 4281 Oct 17 10:07 85592_372474.dat > 7. Then did "ls -l" from "/home" directory > drwxrwxrwx 2 root root 4096 Oct 18 14:20 ftp_data/ > > So, at this point we are able to see that we allowed "rwx" to "all", were able > run a CGI script that wrote data into the "ftp_data" directory, and then showed > that the "ftp_data" directory did not change it's privileges after the CGI > script had finished. > > 7. About 30 minutes later, did another "ls -l" from "/home" and got the > following: > drwxr-xr-x 2 root root 4096 Oct 18 14:20 ftp_data/ > which shows that "group" and "world" have their "write" privileges turned off. > Note: We did not log off from "root" during this time. > > We do not have any "cron" jobs running, so we cannot think of any reason why > the security on this directory keeps changing. > > As an FYI, we have another server running where we had made this same exact > security change on "/home/ftp_data", and it has never changed it's settings. > > > Thank you, > Kathy > > Want to buy your Pack or Services from MandrakeSoft? > Go to http://www.mandrakestore.com
Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com