#355 linux web dir security settings

[Anonymous]

Simple Groupware version: 0.745
Simple Groupware language: en
PHP Version: 5.3.6-13ubuntu3.7
Database + Version: pgsql 913
Server OS: Linux dft 3.0.0-20-generic #34-Ubuntu SMP Tue May 1 17:28:21 UTC 2012 i686
Webserver: Apache/2.2.20 (Ubuntu)
Webbrowser: Mozilla/5.0 (X11; Linux i686) AppleWebKit/535.19 (KHTML, like Gecko) Ubuntu/11.10 Chromium/18.0.1025.168 Chrome/18.0.1025.168
Safari/535.19
APC cache usage: not installed

Problem description:

Dear SG team,

when doing the installation, following the manual, I get to the below point:

Create a new directory under your document root and make it world writable
(e.g. /var/www/sgs/)

now, this is almost setting that dir to 777 mode! This is fine for the installation procedure but what happens afterwards? Which settings are recommended to keep that one safe?

Thanks

[Thomas Bley]

Hello,

see:
http://www.simple-groupware.de/cms/Installation
http://www.simple-groupware.de/cms/Update

bye
Thomas

[Anonymous]

Thanks for your prompt reply but I did follow that documentation and couldn't figure out any recommendation for the linux file system dir security settings after the installation is done. This public 'w' access right does worry me a bit. Except if I missed something?

Tim

[Thomas Bley]

Hello,

you can make the system read-only, but then you can't upload files or write data into the database.

bye
Thomas