|
It's true that Apache is running under www-data group on Jessie : root 11718 0.0 3.4 446260 35680 ? Ss 15:03 0:00 /usr/sbin/apache2 -k start www-data 11722 0.0 1.3 446292 13424 ? S 15:03 0:00 /usr/sbin/apache2 -k start www-data 11723 0.0 1.3 446292 13424 ? S 15:03 0:00 /usr/sbin/apache2 -k start www-data 11724 0.0 1.3 446292 13424 ? S 15:03 0:00 /usr/sbin/apache2 -k start www-data 11725 0.0 1.3 446292 13424 ? S 15:03 0:00 /usr/sbin/apache2 -k start www-data 11726 0.0 1.3 446292 13424 ? S 15:03 0:00 /usr/sbin/apache2 -k start www-data 11736 0.0 1.3 446292 13424 ? S 15:03 0:00 /usr/sbin/apache2 -k start www-data 11740 0.0 1.3 446292 13424 ? S 15:03 0:00 /usr/sbin/apache2 -k start www-data 11741 0.0 1.3 446292 13424 ? S 15:03 0:00 /usr/sbin/apache2 -k start www-data 11742 0.0 1.3 446292 13424 ? S 15:03 0:00 /usr/sbin/apache2 -k start www-data 11743 0.0 1.3 446292 13424 ? S 15:03 0:00 /usr/sbin/apache2 -k start But on Wheezy, Apache is running under root, so I don't have to give execute access to the folder : root 2178 0.2 0.4 363472 44104 ? S 15:33 0:10 /usr/sbin/apache2 -k start root 2292 0.2 0.4 363472 44104 ? S 15:15 0:13 /usr/sbin/apache2 -k start root 15009 0.1 0.4 363472 44104 ? S 14:22 0:13 /usr/sbin/apache2 -k start root 16979 0.0 0.1 337332 17664 ? S févr.17 0:02 /usr/sbin/apache2 -k start root 23261 0.2 0.4 363472 44104 ? S 16:04 0:05 /usr/sbin/apache2 -k start root 24872 0.1 0.4 363472 44104 ? S 14:09 0:15 /usr/sbin/apache2 -k start root 27992 0.2 0.4 363472 44104 ? S 13:50 0:23 /usr/sbin/apache2 -k start root 28543 0.1 0.4 363472 44104 ? S 15:11 0:09 /usr/sbin/apache2 -k start root 29159 0.0 0.4 363472 44104 ? S 16:06 0:00 /usr/sbin/apache2 -k start root 29309 0.0 0.4 363472 44104 ? S 16:07 0:01 /usr/sbin/apache2 -k start root 29857 0.2 0.4 363472 44104 ? S 16:07 0:04 /usr/sbin/apache2 -k start root 30088 0.2 0.4 363472 44104 ? S 16:07 0:04 /usr/sbin/apache2 -k start root 31218 0.2 0.4 363472 44104 ? S 16:08 0:04 /usr/sbin/apache2 -k start root 32046 0.2 0.4 363472 44108 ? S 16:08 0:04 /usr/sbin/apache2 -k start Le 23/03/2016 15:52, tomas@tuxteam.de a
écrit :
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Wed, Mar 23, 2016 at 03:48:41PM +0100, Olivier Desport wrote:Hi Thomas, I don't want to set 755 permissions to this folder for security reasons. It worked well like this (750) with Wheezy/Apache 2.2 and I want to keep my settings.Whatever "this folder" is ;-) Anyway, if Apache hasn't read *and* execute access then it won't play with you. I don't know what "this" folder is, but if we are talking about one of the last directories in the path (i.e. /var/www or even /var/www/portail), then you might consider to set their "group" to the group Apache is running under, so that permissions 0750 can actually do the trick. Typically, Apache is running under group apache, but I'd double- check. regards - -- t -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iEYEARECAAYFAlbyrcAACgkQBcgs9XrR2kaSbACeNxlTetCZVIWDN1at9cGzBr/T jpEAnRRUHaYSzMRaRnGsn3r5pohXYXbW =qnCM -----END PGP SIGNATURE----- |