LinuxQuestions.org
Download your favorite Linux distribution at LQ ISO.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Server
User Name
Password
Linux - Server This forum is for the discussion of Linux Software used in a server related context.

Notices


Reply
  Search this Thread
Old 01-21-2011, 02:21 AM   #1
Shawn.Dohmen@IsleDiscoun
LQ Newbie
 
Registered: Jan 2011
Posts: 2

Rep: Reputation: 0
SFTP on Linux Server - folders become world writable!


My website, IsleDiscount.com, is hosted on a virtual server with pair.com. Pair.com offers only one SFTP account on regular shared server and to set up mutltiple SFTP accounts, Pair.com moved me to a virtual server (VQS1), which I believe is not a shared server solution, but Pair representatives were able to create multiple SFTP accounts on this VQS server.

However, when I asked the representative to restrict access of this additional SFTP accounts to a sub-folder, I got the following warning email:
-------
Please confirm you understand this will make your entire web directory world-writeable. This will increase the chances of a security attack. If you do understand this, you can go ahead and execute the command yourself.
The command below will accomplish both commands in one.

> chmod -R 707 /usr/www/users/Shawn.Dohmen/

Please let us know if you have any additional questions.

pair Networks, Inc.
-----------------

Can someone throw some light on this? I don't think it's any good idea to make the directory word-writable!
Thank you,

offshore_software_company@quartiz.com

www.quartiz.com

Last edited by Shawn.Dohmen@IsleDiscoun; 11-29-2011 at 08:05 PM.
 
Old 01-21-2011, 02:24 AM   #2
Shawn.Dohmen@IsleDiscoun
LQ Newbie
 
Registered: Jan 2011
Posts: 2

Original Poster
Rep: Reputation: 0
[QUOTE=Shawn.Dohmen@IsleDiscoun;4232629]My website, IsleDiscount.com, is hosted on a virtual server with pair.com. Pair.com offers only one SFTP account on regular shared server and to set up mutltiple SFTP accounts, Pair.com moved me to a virtual server (VQS1), which I believe is not a shared server solution, but Pair representatives were able to create multiple SFTP accounts on this VQS server.

However, when I asked the representative to restrict access of this additional SFTP accounts to a sub-folder, I got the following warning email:
-------
Please confirm you understand this will make your entire web directory world-writeable. This will increase the chances of a security attack. If you do understand this, you can go ahead and execute the command yourself.
The command below will accomplish both commands in one.

> chmod -R 707 /usr/www/users/Shawn.Dohmen/

Please let us know if you have any additional questions.

pair Networks, Inc.
-----------------

Can someone throw some light on this? I don't think it's any good idea to make the directory word-writable!
Thank you,

I forgot to mention that the files that are stored on this site are my website's files. From time to time, we may safekeep other important files on these folders becuase Pair.com has a great back and recovery solution with their hosting packages.

offshore_software_company@quartiz.com
www.quartiz.com

Last edited by Shawn.Dohmen@IsleDiscoun; 11-29-2011 at 08:05 PM.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
world writable directory? turbo_acura Linux - Software 8 10-17-2009 07:02 AM
Sendmail Unknown Host and world writable issue hawk__0 Linux - Networking 1 10-13-2009 12:31 PM
crontab and world-writable directories? wy1z Linux - Security 2 01-25-2008 01:38 AM
World Writable Files ilago Linux - Security 4 10-06-2007 11:21 PM
sendmail world writable directory jbrearley Linux - Software 0 07-01-2004 12:16 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Server

All times are GMT -5. The time now is 09:55 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration