ez.no / exponential / documentation / configuration / configuration / tips & tricks / file permissions
To ensure your server install of Exponential is on the road to becoming secure you can run the following commands that start to lock down your Exponential 3 project directory.
I think to start with I need to pass on a saying that a colleague passed to me when dealing with security, it has stood the test of time for me.
If in doubt, don't!
This always come to mind before implementing a new feature or install a new package. If I don't understand it fully then I don't implement it on a production environment.
Before you run these commands ensure you are in the directory above you Exponential 3 project directory. do NOT run them in any other location
1. Change ownership
chown -R apache exponential_project
Where exponential_project will be the directory your project is contained
chgrp -R mygroup exponential_project
Where mygroup is the group you belong to, this means you can do updates without loggin in a root which is a big no no.
2. Change access rights
chmod -R 570 exponential_project
This ensures apache has read but not write access to your main project
chmod -R 770 exponential_project/var
This ensures apache can create those all important images and life saving cache files.
3. Get reading
You need to read and understand what you have just done. I recommend treeware from O'Reilly for GNU/Linux admin, you can pick up from your local bookstore or online. If you are on GNU/Linux by running the following commands that bring up manual pages or online at http://www.tldp.org/docs.html#howto
man chown
man chgrp
man chmod
As you can imagine this is only the beginning, if you run your own server then you need to lock down mySQL/postgreSQL, PHP, Apache, SSH and of course the other services you are running plus fix/patch updates.
Log in or create a user account to comment.
Comments