LinuxQuestions.org
Help answer threads with 0 replies.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 08-21-2009, 10:44 AM   #1
jmikeneedham
Member
 
Registered: Jul 2005
Location: Lawrence, Kansas USA
Distribution: openSUSE 11.1
Posts: 44

Rep: Reputation: 15
group permissions or symlinks best practice


Hello All:

I was about to post a new thread and saw that there are several answers out here already and I have done the new group permission one on my server -- actually on my test server I just added "my user" to the group "root" to gain rw access to /var/www/htdocs/.

Someone suggested that the proper way might be to do symlinks to the directory in a real production environment and I wanted to find out if that is the *best* way to go or whether to actually make a group "www_admin" (pick your favorite flavor of this) and add my users to that group?

I guess I am looking for the "best practice" in a real corporate production environment that is most secure.

Thanks,

Mike
 
Old 08-21-2009, 11:16 AM   #2
unixfool
Member
 
Registered: May 2005
Location: Northern VA
Distribution: Slackware, Ubuntu, FreeBSD, OpenBSD, OS X
Posts: 782
Blog Entries: 8

Rep: Reputation: 158Reputation: 158
I think you should've actually created a new thread...this one is VERY old and will probably be locked by the admins.
 
Old 08-21-2009, 07:20 PM   #3
win32sux
LQ Guru
 
Registered: Jul 2003
Location: Los Angeles
Distribution: Ubuntu
Posts: 9,870

Rep: Reputation: 380Reputation: 380Reputation: 380Reputation: 380
jmikeneedham, I've moved this to a new thread (please don't resurrect dead threads).
 
Old 08-22-2009, 05:00 PM   #4
anomie
Senior Member
 
Registered: Nov 2004
Location: Texas
Distribution: RHEL, Scientific Linux, Debian, Fedora
Posts: 3,935
Blog Entries: 5

Rep: Reputation: Disabled
Quote:
Originally Posted by jmikeneedham
Someone suggested that the proper way might be to do symlinks to the directory in a real production environment and I wanted to find out if that is the *best* way to go or whether to actually make a group "www_admin" (pick your favorite flavor of this) and add my users to that group?
I'm not sure I understand the "do symlinks to the directory" suggestion. Creating a symlink doesn't allow you to magically override permissions that are in place. Which is to say: I would need to see a working example before commenting.

The second suggestion sounds fine -- creating a wwwadmin (or similar) group, setting group ownership with write access to the directory, and adding the needed accounts to wwwadmin.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
permissions not recognizing group or assigned users to group blckspder Linux - Server 1 07-28-2008 10:32 AM
Samba sharing, linux permissions and best practice batfastad Linux - Server 0 06-26-2008 03:41 AM
File permissions, good practice benedikt.k Linux - Security 1 02-05-2008 02:08 PM
Apache htdocs permissions best practice? terosaur Linux - Security 3 01-28-2008 07:03 PM
tar not keeping permissions of symlinks exodist Linux - Software 1 06-14-2006 08:33 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 08:44 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration