Discuss

discuss@lists.centos.org

34753 discussions

Re: [CentOS] /var/www/html group & owner (fwd)
by Hiep Nguyen 05 Mar '08

05 Mar '08

On Tue, 4 Mar 2008, lists-centos wrote: > for apache to be able to serve the files under the document root it > needs (and should only have) read access to the files (and > read/execute for the directories). the directories/files under the > document root should **not** be owned (or writeable) by the > user/group that the web server is running as. if they are, you have a > security hole should someone break through the webserver (or more > likely poorly written scripts). > > so, a good approach is to have the directories/files under > owner/group other than apache (assuming your web server is running as > the apache user), with read-only access given to "world". assume that i have a user and group named "weber". i'll use "weber" to upload (via ftp) directories/files to /var/www/html/ what should /var/www/html/ look like? also, i have some php include files that i don't want anyone access except apache b/c they contain user/pw to mysql. where should i place them? i usually place them in /var/www/html/includes/ someone suggested i place them in /var/www/include/, but my question is what user/group /var/www/include/ belong to? thanks t. hiep > > > - Rick > > ------------ Original Message ------------ >> Date: Tuesday, March 04, 2008 12:18:56 PM -0800 >> From: Hiep Nguyen <hiep(a)ee.ucr.edu> >> To: centos(a)centos.org >> Cc: >> Subject: [CentOS] /var/www/html group & owner >> >> hi again, >> >> [root@dev ~]# ls -all /var/www/ >> total 64 >> drwxr-xr-x 8 root root 4096 Mar 3 11:44 . >> drwxr-xr-x 21 root root 4096 Mar 3 11:44 .. >> drwxr-xr-x 2 root root 4096 Jan 15 20:36 cgi-bin >> drwxr-xr-x 3 root root 4096 Mar 3 11:43 error >> drwxr-xr-x 2 root root 4096 Jan 15 20:36 html >> drwxr-xr-x 3 root root 4096 Mar 3 11:44 icons >> drwxr-xr-x 14 root root 4096 Mar 3 11:44 manual >> drwxr-xr-x 2 webalizer root 4096 Mar 3 11:44 usage >> >> currently, html is belonging to root group/owner and httpd is >> running under apache user/group. >> >> what should i change html to, so that httpd can run safely under >> apache user/group??? >> >> or should i change httpd to run under a different user/group??? >> >> if i keep httpd running on apache user/group, should i change html >> to apache group/owner??? >> >> thank you for all your help. >> t. hiep >> >> >> _______________________________________________ >> CentOS mailing list >> CentOS(a)centos.org >> http://lists.centos.org/mailman/listinfo/centos > > ---------- End Original Message ---------- > >

1 0

Error reading block x (Attempt to read block...)
by Scott R. Ehrlich 05 Mar '08

05 Mar '08

A Centos 5 64-bit server reflected some SCSI kernel errors in the logs, so I opted to reboot, only to be prompted to perform a manual fsck, that an automatic fsck wouldn't be permitted. As a result, the fsck is taking a long time, as I have to babysit the server for every bad block that is reported and needs a forced rewrite. The exact error is "Error reading block x (Attempt to read block from filesystem resulted in short read) while doing inode scan. Ignore error(y)? Force rewrite(y)?" I say yes to both. Could I safely get away with booting from a CentOS 5 CD and performing a fsck with automatic system fixing to speed up the process, or do I need to be patient and just keep manually selecting Y for as long as it takes? Thanks. Scott

2 1

Module i2c-piix4 for lm_sensors on CentOS 5 64 Bit
by Sebastian Marten 05 Mar '08

05 Mar '08

Hi list, Where can i find the i2c-piix4 module for CentOs 5 64 Bit? If i say modprobe i2c-piix4 i get the error: FATAL: Module i2c_piix4 not found. Can you help me? Greetings Sebastian

1 0

LVM: how do I change the UUID of a LV?
by Timothy Selivanow 05 Mar '08

05 Mar '08

I know how to change the UUID of Physical Volumes and Volume Groups, but when I try to do the same for a Logical Volume, lvchange complains that "--uuid" is not an option. Here is how I've been changing the others (note that "--uuid" does not appear in the man pages for pvchange and vgchange for lvm2-2.02.26-3.el5): pvchange --uuid {pv dev} vgchange --uuid {vg name} Any suggestions? I'm pretty much open to any arcane/convoluted procedure, but I refrain from copying the data to a temp place so I can re-create the LV as that would add too much work and would kinda defeat what I'm doing. Thanks! --Tim _________________________________________________________ / Obviously I was either onto something, or on something. \ \ -- Larry Wall on the creation of Perl / --------------------------------------------------------- \ \ \ \ /\ ( ) .( o ).

2 1

Overwrite target of ln
by Matt Arnilo S. Baluyos (Mailing Lists) 05 Mar '08

05 Mar '08

Hi all, Sorry if this seems too basic. But is there a way to overwrite the target of a symbolic link without first deleting the symlink itself? For example, if I have this: public_html -> releases/b2b-20080228 ... and there's a new update, I can then just do the following: $ ln releases/site-latest public_html I tried using the -f option but it doesn't seem to work as expected. -- Stand before it and there is no beginning. Follow it and there is no end. Stay with the ancient Tao, Move with the present.

3 5

Dag RPM Repo "error"
by Joseph.Sikes＠cox.com 05 Mar '08

05 Mar '08

I apologize if this was the wrong place to inquire, but thank you very much for your suggestions. - Joseph

1 0

Rejecting spam
by Tim Alberts 04 Mar '08

04 Mar '08

Sorry, not a direct CentOS question, but I know there's a lot of experienced users on this list...I'm using CentOS with sendmail and spamassassin. I've got it configured with spamass-milter and it is working correctly. However, I was expecting to be able to reject mail that is marked as spam, not just deliver it as usual. Anyone know if it can be done and how? I know a milter can reject mail, because I've used milter-grelist in the past to give temporary fail messages. Following is my sendmail.m4 directive for spamass-milter: INPUT_MAIL_FILTER(`spamassassin', `S=unix:/var/run/spamass-milter/spamass-milter.sock, F=, T=C:15m;S:4m;R:4m;E:10m')dnl define(`confMILTER_MACROS_CONNECT',`t, b, j, _, {daemon_name}, {if_name}, {if_addr}')dnl define(`confMILTER_MACROS_HELO',`s, {tls_version}, {cipher}, {cipher_bits}, {cert_subject}, {cert_issuer}')dnl

7 16

procmailrc
by John Hinton 04 Mar '08

04 Mar '08

I have one box, a 3.x box, that has a problem finding procmailrc files. For instance, if I have a .procmailrc file in /var/www/user/homes/username it finds it and it works. If I have a .procmailrc file under /var/www/user it doesn't. Where the heck is the setting for where procmail looks for user procmailrc files? Thanks, John Hinton

2 2

VMWare error: Use of uninitialized value in string eq
by Rudi Ahlers 04 Mar '08

04 Mar '08

Hi all I hope anyone can help me with this. I'm trying to get vmware to play along nicely on CentOS 5.1 x64, but I get errors when I try and start a vmx image, or list them. This the the error: [root@backup vmware-mui-distrib]# vmware-cmd -l Use of uninitialized value in string eq at /usr/lib64/perl5/site_perl/5.8.8/x86_64-linux-thread-multi/VMware/VmPerl.pm line 114. /etc/vmware/windowsxp01.vmx Google didn't return anything, maybe someone on the list knows something? [root@backup vmware-mui-distrib]# uname -a Linux backup.softdux.com 2.6.18-53.1.13.el5 #1 SMP Tue Feb 12 13:02:30 EST 2008 x86_64 x86_64 x86_64 GNU/Linux -- Kind Regards Rudi Ahlers CEO, SoftDux Web: http://www.SoftDux.com Check out my technical blog, http://blog.softdux.com for Linux or other technical stuff, or visit http://www.WebHostingTalk.co.za for Web Hosting stugg

3 3

Dag RPM Repo "error"
by Joseph.Sikes＠cox.com 04 Mar '08

04 Mar '08

I'm getting the error below when I try to do a yum update on my server. It seems that it is looking for an update for my boot loader - syslinux-3.62-1.el4.rf.i386.rpm, but can't find it via the normal path. I've tried looking further up the directory tree on apt.sw.be/redhat/el4/en. I've found a place to download it from. [ http://www.icewalkers.com/Linux/Software/51700/syslinux.html ] Any info or advice would be greatly appreciated. Thanks for your help! .... dag : ################################################## 8703/8703 primary.xml.gz 100% |=========================| 88 kB 00:00 ..... Resolving Dependencies --> Populating transaction set with selected packages. Please wait. ---> Downloading header for syslinux to pack into transaction set. http://apt.sw.be/redhat/el4/en/i386/dag/RPMS/syslinux-3.62-1.el4.rf.i386 .rpm: [Errno 14] HTTP Error 404: Not Found Trying other mirror. Error: failure: RPMS/syslinux-3.62-1.el4.rf.i386.rpm from dag: [Errno 256] No more mirrors to try. (This is my Dag Repo config) [root@dukeidsi01 yum.repos.d]# cat dag.repo [dag] name=Dag RPM Repository for Red Hat Enterprise Linux baseurl=http://apt.sw.be/redhat/el$releasever/en/$basearch/dag gpgcheck=0 enabled=1 Joseph Sikes Cox Communications Network Security & Abuse Operations - - - - - - - - - - - - - - - - - - - - joseph.sikes(a)cox.com Phone: 404-847-6486 Mobile: 404-964-6006 Fax: 404-269-1045 AIM: joesikesatl

4 3

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Discuss