Is this a security risk?

jim.thornton · 01-17-2008, 11:16 PM

I'm in the process of setting up a VPS/Hosting Company. As one of the accounts, I will be running a personal site off it.

I just uploaded a .tar.gz file to the public_html and extracted everything, no problems.

When I log in to DirectAdmin and look at the file manager, I notice that all the files that I just extracted are the owner and the group of root. I assume that this is because I ran tar in su mode.

So, now to the question, having these files as the owner/group root/root... Is that a security risk??

thedonkdonk · 01-18-2008, 01:55 AM

No problem. In fact this would make it more secure. I have all my website files owned as root. Apache just needs read permissions on .html and .php files and execute permissions on anything in what ever you have setup as the cgi-bin directory.