LinuxQuestions.org
Download your favorite Linux distribution at LQ ISO.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 10-12-2005, 01:33 PM   #1
GNewbie
Member
 
Registered: Sep 2005
Distribution: (U/K/X)buntu 6.1 (newer box) / D*mn Small Linux (older box)
Posts: 326

Rep: Reputation: 31
Linux webserver security


i'm a database developer and my company has a linux server that is used to host my database. however, the server is also used for other purposes and i'm not the admin of the system.

the admin is nervous b/c i currently have to have root access in order to upload and delete files in the html directory.

i understand the desire for security - i'd hate to muff up something on the system (unlikely, but ya never know!).

anyway, what is the best way for him to set up a user account that gives me read / write access to the html directory, does not allow me to run as root and does not allow any other users to write to the html directory?

tia...
 
Old 10-12-2005, 02:35 PM   #2
jonaskoelker
Senior Member
 
Registered: Jul 2004
Location: Denmark
Distribution: Ubuntu, Debian
Posts: 1,524

Rep: Reputation: 47
Code:
# adduser webmaster
# chown webmaster:webmaster /var/www
Should do the trick.

It feels like a hack, though. Much better (IMHO) would be to have the apache `root directory' set to /home/webmaster/mysite/ or something like that. grep -re /var/www /etc/apache*/*.

Even better, for the security-minded, would be to chroot apache, run it in a user-mode-linux jail, or both. This, of course, may or may not be acceptable, depending on what the web page does.

hth --Jonas
 
Old 10-18-2005, 09:04 AM   #3
int0x80
Member
 
Registered: Sep 2002
Posts: 310

Rep: Reputation: Disabled
Hahaa!

My name > Your name

Hi.

Sorry for the irrelevant post, I just had to assert alpha when I saw your name. Best wishes with your filesystem permissions. You may want to check the tutorial here on the forum, or you could just get a real sysadmin who knows how to handle such things.

GNUbie
 
Old 10-18-2005, 12:53 PM   #4
jonaskoelker
Senior Member
 
Registered: Jul 2004
Location: Denmark
Distribution: Ubuntu, Debian
Posts: 1,524

Rep: Reputation: 47
GNUbie: My name > your name. Just had to assert real alpha status.

Besides, mine is longer than yours.

--Jonas
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
help needed in security ,vonarabilities ,loopholes in linux security haseebnazar Linux - Security 2 11-23-2005 07:16 PM
todays requirements regarding security (not limited to linux security) markus1982 Linux - Security 8 04-25-2004 10:58 PM
security on webserver? worried! TreeHugger Linux - Security 9 12-31-2003 08:11 AM
Linux security Vs Windows security keene General 50 11-01-2003 11:22 PM
Can't see WebServer from outside... Can see WebServer locally as http://localhost friddick Linux - Networking 13 08-19-2003 06:27 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 02:41 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration