Re: [CentOS] Simple web server with Apache: web page permissions ?

2009-09-15 Thread Olaf Mueller
Brian Mathis wrote: > You are being disingenuous here by selectively editing out the > relevant quoted text from the same message above, which I will add > back in as a quote here: Disingenuous? Seems to me that it is a question of truth for you. Once again. 'apache:apache' is a risk, but it is n

Re: [CentOS] Simple web server with Apache: web page permissions ?

2009-09-15 Thread Filipe Brandenburger
Hi, On Tue, Sep 15, 2009 at 11:58, Olaf Mueller wrote: > Filipe Brandenburger wrote: > >> On Tue, Sep 15, 2009 at 06:39, Ralph Angenendt >> wrote: >>> apache:apache - at least that is the UID/GID the webserver runs >>> under. >> >> That's wrong. If your files are owned by Apache, any user that

Re: [CentOS] Simple web server with Apache: web page permissions ?

2009-09-15 Thread Olaf Mueller
Les Mikesell wrote: > Olaf Mueller wrote: >> Filipe Brandenburger wrote: >> >>> On Tue, Sep 15, 2009 at 06:39, Ralph Angenendt >>> wrote: On Tue, 2009-09-15 at 10:20 +0200, Niki Kovacs wrote: > I remember having setup some web servers on Debian, and the > tradition was that everythi

Re: [CentOS] Simple web server with Apache: web page permissions ?

2009-09-15 Thread Les Mikesell
Olaf Mueller wrote: > Filipe Brandenburger wrote: > >> On Tue, Sep 15, 2009 at 06:39, Ralph Angenendt >> wrote: >>> On Tue, 2009-09-15 at 10:20 +0200, Niki Kovacs wrote: I remember having setup some web servers on Debian, and the tradition was that everything under /var/www/html (as in

Re: [CentOS] Simple web server with Apache: web page permissions ?

2009-09-15 Thread Brian Mathis
On Tue, Sep 15, 2009 at 11:58 AM, Olaf Mueller wrote: > Filipe Brandenburger wrote: >> On Tue, Sep 15, 2009 at 06:39, Ralph Angenendt >> wrote: >>> On Tue, 2009-09-15 at 10:20 +0200, Niki Kovacs wrote: I remember having setup some web servers on Debian, and the tradition was that everyt

Re: [CentOS] Simple web server with Apache: web page permissions ?

2009-09-15 Thread Olaf Mueller
Filipe Brandenburger wrote: > On Tue, Sep 15, 2009 at 06:39, Ralph Angenendt > wrote: >> On Tue, 2009-09-15 at 10:20 +0200, Niki Kovacs wrote: >>> I remember having setup some web servers on Debian, and the >>> tradition was that everything under /var/www/html (as in this >>> example) was to be o

Re: [CentOS] Simple web server with Apache: web page permissions ?

2009-09-15 Thread Filipe Brandenburger
Hi, On Tue, Sep 15, 2009 at 06:39, Ralph Angenendt wrote: > On Tue, 2009-09-15 at 10:20 +0200, Niki Kovacs wrote: >> I remember having setup some web servers on Debian, and the tradition >> was that everything under /var/www/html (as in this example) was to be >> owned by user www-data and group

Re: [CentOS] Simple web server with Apache: web page permissions ?

2009-09-15 Thread Brian Mathis
On Tue, Sep 15, 2009 at 6:39 AM, Ralph Angenendt wrote: > > On Tue, 2009-09-15 at 10:20 +0200, Niki Kovacs wrote: >> I remember having setup some web servers on Debian, and the tradition >> was that everything under /var/www/html (as in this example) was to be >> owned by user www-data and group w

Re: [CentOS] Simple web server with Apache: web page permissions ?

2009-09-15 Thread Ralph Angenendt
On Tue, 2009-09-15 at 13:27 +0200, Niki Kovacs wrote: > Ralph Angenendt a écrit : > > > > > apache:apache - at least that is the UID/GID the webserver runs under. > > > Thanks very much... and thumbs up to one of the authors. I really like > the book. That chapter was written by someone else

Re: [CentOS] Simple web server with Apache: web page permissions ?

2009-09-15 Thread Niki Kovacs
Jim Perrin a écrit : > > 2. Are you hosting static content or dynamic pages? Both and neither :o) I'm a system administrator for a series of public libraries here, and hosting several dynamic sites on a dedicated server (running CentOS). I'm just in one of my documentation phases, where I hav

Re: [CentOS] Simple web server with Apache: web page permissions ?

2009-09-15 Thread Niki Kovacs
Ralph Angenendt a écrit : > > apache:apache - at least that is the UID/GID the webserver runs under. > Thanks very much... and thumbs up to one of the authors. I really like the book. Niki ___ CentOS mailing list CentOS@centos.org http://lists.cento

Re: [CentOS] Simple web server with Apache: web page permissions ?

2009-09-15 Thread Jim Perrin
On Tue, Sep 15, 2009 at 4:20 AM, Niki Kovacs wrote: > Hi, > Q: what permissions should I define for these pages? I'd say, the most restrictive permissions possible, that still allow your web application to function. I'm a bit more security conscious/paranoid than most though. There are an array

Re: [CentOS] Simple web server with Apache: web page permissions ?

2009-09-15 Thread Ralph Angenendt
On Tue, 2009-09-15 at 10:20 +0200, Niki Kovacs wrote: > I remember having setup some web servers on Debian, and the tradition > was that everything under /var/www/html (as in this example) was to be > owned by user www-data and group www-data. > > What's the "tradition" with RHEL/CentOS? apach

[CentOS] Simple web server with Apache: web page permissions ?

2009-09-15 Thread Niki Kovacs
Hi, I'm currently sinking my teeth into the fine "Definitive Guide to CentOS". Right now I'm reading the chapter about Apache. One thing puzzles me: no mention is made of web page permissions. Let's say I'm using Apache's default configuration for setting up the most simple no-frills web serve