[Gllug] Apache web root permissions

[Sean Burlington]

2009/11/27 Stephen Nelson-Smith <sanelson at gmail.com>:

>
> chown -R root:apache /var/www/html
> chmod -R 0750 /var/www/html
> chown apache:apache for where need to write
>
> Is there a better way?

looks OK to me as long as this is a dedicated server - I don't think
anyone who's fanatical about security should be running Drupal in the
first place.


Also if you are running drush (command line Drupal) don't forget to
ensure that the user this command runs as has appropriate permissions

AND that files created by this user can still be managed by Drupal under apache

if this is an issue for you it may be worth creating a drupal group
and adding both apache and the drush user to it

then make sure the umask is set up correctly (which isn't 100%
straightforward for apache as I remember)

-- 

Sean Burlington

www.practicalweb.co.uk
-- 
Gllug mailing list  -  Gllug at gllug.org.uk
http://lists.gllug.org.uk/mailman/listinfo/gllug