sgid/directory security

connman · 04-15-2004, 10:29 AM

All:

I'm using debian/apache-ssl and want to set the sgid bit on the directory containing web files so that our webdev group has ownership of all files created there. Are there security risks associated with this move?

Also, how do I set recursive write permissions on those files for the webdev group?

Many TIA's...

druuna · 04-15-2004, 11:35 AM

Not the sort of security risk you had in mind, but developers having access to production files is asking for unplanned downtime

Even if you are the only person on that box you should seperate your online stuff from test/develop environments. Typo's can potentionaly whipe out all those hours of work.........

About sgid: If you feed your fav searchengine with sgid and linux you will get plenty of hits. Here are just 2:
http://www.linuxgazette.com/node/view/2759
http://linux.about.com/cs/linux101/g..._set_group.htm

Hope this helps.

connman · 04-15-2004, 11:42 AM

Thanks druuna--the machine in question is in fact a test/dev server and saw both of those articles--but never hurts to corroborate!!