Access rights

[fneergaard]

Hi,

I have just been setting up an 11.10 server which I want to use as a test webserver.

Everything is fine after installation and the the webserver is showing "It works" when loaded!

When I want to access /var/www/ which is default I have no rights and I have tried: sudo chmod 777 www and it is ok too.

Now I want to ftp (quteftp and putty) things to the directory and the the trouble starts... I have no access

I have tried from both in- and external workstations!

Can you help me pls? Thanks

[SteveRiley]

Re: Access rights

Check /var/log/auth.log -- what do you see?

[Telengard]

Re: Access rights

When I want to access /var/www/ which is default I have no rights and I have tried: sudo chmod 777 www and it is ok too.

This can't be good.

[fneergaard]

Re: Access rights

I found a doc describing some configuration in vsftpd.conf. I was uncommenting local_enable=yes and now I an able to transfer files both ways.

Now everything should be fine, but I must have changed another thing because the default remote directory is wrong. CuteFTP does not accept the web directory /var/www/! Any ideas about what to do?

I also think that chmod 777 is too much rights to give in /var/www/. Do you know what it should be?

[Telengard]

Re: Access rights

I also think that chmod 777 is too much rights to give in /var/www/. Do you know what it should be?

No, and I won't claim to know how to configure your server. I think the principle is to grant only as much access as absolutely necessary. It just triggers my paranoia to see 777 on anything. It means anyone can do anything they want inside that directory. If that's where your .html and server side scripts are stored then it is probably going to be a gigantic security hole.

[SteveRiley]

Re: Access rights

Some info on Apache web server security under Linux:

http://www.linuxhomenetworking.com/w...ons_And_Apache

http://www.linuxsecurity.com/content/view/133913/171/