Permission configuration for a Centos-based web server

oxnume · 01-25-2017, 07:44 PM

I am running an apache server and I can't seem to figure out how best to set up permissions for my web files. Basically I would like to have my dropbox client sync my entire web directory, also I would like postfix to be able to have emails delivered as files to a folder inside my web directory so that I can access them through PHP. Security is not a top priority at the moment compared to easy of access.

This is how things are set up right now (please don't laugh at me for how messy it is):
~/Dropbox/ is my dropbox main folder
~/Dropbox/www contains all my web files

/var/www/html symbolic link -> ~/Dropbox/www
/var/www/html is my document root for apache

~/Dropbox/www/email/new symbolic link -> /home/user/Mailbox/new
/home/user/Mailbox/new is my catchall mailbox for postfix

My problem right now is that I can't seem to set up permissions so that all the different elements have access to the files. I can't seem to grant access to everything even after I chmod everything as 777. Please help with permissions and also if you have a suggestion for a better organization. Thank you!

Turbocapitalist · 01-26-2017, 12:11 PM

Undo the link to Dropbox. You can use rsync under cron or something like that to publish the files into Dropbox if you decide you still want to mirror them there. But keep the local files as the original. As for those you want to put on the web, consider these:

https://www.linuxquestions.org/quest...e-users-37043/

However, if you are the only user then simply using chown to take ownership of the directories and files.

Code:

find /var/www/html -type d -exec chmod u=rwx,g=rx,o=rx "{}" \;
find /var/www/html -type f -exec chmod u=rw,g=r,o=r "{}" \;
chown -R oxnume:oxnume /var/www/html/

Habitual · 01-26-2017, 12:57 PM

I don't think you can (or the system won't allow) a Dropbox client to backup the Dropbox directory on the server.
It's cyclically redundant.

ericson007 · 01-26-2017, 10:13 PM

Another issue is that the dropbox directory will have SELinux permissions that will prevent apache accessing them. That should be addressed aswell as I believe there was a boolean that preventsapache using home directories. That would have to be changed as well. So the selinux boolean and the actual file context aretwo immediate issues I see.

Habitual · 01-27-2017, 06:37 AM

Quote:

Originally Posted by ericson007

SELinux

Well, there is that.
And the pig likes it?

ericson007 · 01-27-2017, 09:17 PM

That is Shaw if I remember correctly. Have not heard it in ages!