joomla + umask

jogyulas · 02-24-2015, 04:58 AM

Hello,

I have a server (debian) with some joomla web pages. My problem is, if joomla creates a new file or directory, it is created with only user full access. It is not good for me because I would like to full access for group as well. Joomla uses www-data.

I tried to change apache umask in /etc/apache2/envvars
I appended "umask 002" the end of this file and then I restarted apache service. But unfortunately it didn't work, the new directory was created with the same umask then before.

Can somebody help me? Ty!

Habitual · 02-25-2015, 08:55 AM

Quote:

Originally Posted by jogyulas

My problem is, if joomla creates a new file or directory, it is created with only user full access. It is not good for me because I would like to full access for group as well. Joomla uses www-data.

Define "full access" explicitly.

Quote:

Originally Posted by jogyulas

I tried to change apache umask in /etc/apache2/envvars
I appended "umask 002" the end of this file and then I restarted apache service. But unfortunately it didn't work, the new directory was created with the same umask then before.

Joomla and others like it are Big Fat Targets for exploit material. I hope the box and the software hosted on it are up to date.
Add yourself to www-data?

Code:

usermod -a -G <you> www-data

Messing with files/perms of files being served on a forward-facing system is inviting trouble, IMO.

644 for files.
755 for directories.

All 4,096 possible linux file permissions explained