Login or Register to Ask a Question and Join Our Community

Sponsored Content
Full Discussion: Protecting the directory tree
Top Forums UNIX for Dummies Questions & Answers Protecting the directory tree Post 302168218 by Smiling Dragon on Sunday 17th of February 2008 04:13:37 PM
Old 02-17-2008
If you give user's read/write access to subdirs of htdocs, you had better trust them. Otherwise you are allowing them to run arbitrary code as the apache user (this might be ok of course if you have set up apache so that the user running it has the minimum access).
Generally speaking, it's a better idea to allocate a seperate area for user's home dirs.

If you really have to do it this way though, you only need to grant execute access to the parent directories of htdocs. Leave off the read-access bit and they will only be able to change into the dirs, not read the contents.
eg
/ root root drwxr-xr-x
/export root root drwx--x--x
/export/htdocs root root drwx--x--x
/export/htdocs/user1 user1 httpusers drwxr-xr-x
/export/htdocs/user2 user2 httpusers drwxr-xr-x
 

9 More Discussions You Might Find Interesting

1. UNIX for Dummies Questions & Answers

password protecting a directory

I need to password protect a particular file on one of my websites. Is it possible to password protect the entire directory? Or can I only password protect one file. How do I do this? Does it have to do with the .HTACCESS file on my unix server? Please Help! ~ :confused: ~ (2 Replies)
Discussion started by: iriemember
2 Replies

2. Programming

directory as tree

hi i have modified a program to display directory entries recursively in a tree like form i need an output with the following guidelines: the prog displays the contents of the directory the directory contents are sorted before printing so that directories come before regular files if an entry... (2 Replies)
Discussion started by: anything2
2 Replies

3. Shell Programming and Scripting

directory tree

Hi all, The following is a script for displaying directory tree. D=${1:-`pwd`} (cd $D; pwd) find $D -type d -print | sort | sed -e "s,^$D,,"\ -e "/^$/d"\ -e "s,*/\(*\)$,\:-----\1,"\ -e "s,*/,: ,g" | more exit 0 I am trying to understand the above script.But... (3 Replies)
Discussion started by: ravi raj kumar
3 Replies

4. UNIX for Dummies Questions & Answers

Move all files in a directory tree to a signal directory?

Is this possible? Let me know If I need specify further on what I am trying to do- I just want to spare you the boring details of my personal file management. Thanks in advance- Brian- (2 Replies)
Discussion started by: briandanielz
2 Replies

5. UNIX for Dummies Questions & Answers

Password protecting a directory

Hi, Is there a way to password protect a dir in linux ?? I need to protect the tmp folder of a JBoss server instance running on Linux RedHat os. I cannot change permissions cause, the root password is shared and a number of people login via that. also if possible can i restrict the root... (2 Replies)
Discussion started by: akshay61286
2 Replies

6. Shell Programming and Scripting

creating a directory tree

Hi all, I'd like to create a directory tree, and define from stdin how many levels deep and how many directories in each level should be created. What I wrote does not work properly:#!/bin/bash #set -x read -p " What root directory? " rootDir && { /bin/rm -R $rootDir; mkdir $rootDir; } ||... (2 Replies)
Discussion started by: NBaH
2 Replies

7. UNIX for Dummies Questions & Answers

directory tree with directory size

find . -type d -print 2>/dev/null|awk '!/\.$/ {for (i=1;i<NF;i++){d=length($i);if ( d < 5 && i != 1 )d=5;printf("%"d"s","|")}print "---"$NF}' FS='/' Can someone explain how this works..?? How can i add directory size to be listed in the above command's output..?? (1 Reply)
Discussion started by: vikram3.r
1 Replies

8. UNIX for Dummies Questions & Answers

Protecting a folder/directory against root access.

A friend and I run a vbulletin forum which recently got hacked. We believe what wound up happening was the attacker gained access to the VPS box and from there elevated their user accounts to admin status on our forums. Obviously if someone gets into our box in the future it'll be a disaster so... (1 Reply)
Discussion started by: fannypack
1 Replies

9. Shell Programming and Scripting

Specific directory parsing in a directory tree

Hi friends, Hello again :) i got stuck in problem. Is there any way to get a special directory from directory tree? Here is my problm.." Suppose i have one fix directory structure "/abc/xyz/pqr/"(this will be fix).Under this directory structure i have some other directory and... (6 Replies)
Discussion started by: harpal singh
6 Replies

LEARN ABOUT SUNOS

apache

apache(1M)						  System Administration Commands						apache(1M)

NAME

       apache - Apache hypertext transfer protocol server overview

DESCRIPTION

	apache	consists  of a main server daemon, loadable server modules, some additional support utilities, configuration files, and documenta-
       tion.

FILES

       The apache HTTPD server is integrated with Solaris.

       The following files specify the installation locations for apache:

       /etc/apache	       Contains server configuration files.

			       A newly-installed server must be manually configured before use. Typically this involves copying httpd.conf-example
			       to the httpd.conf file and making local configuration adjustments.

       /usr/apache/bin	       Contains the httpd executable as well as other utility programs.

       /usr/apache/htdocs      Contains  the  Apache  manual  in HTML format. This documentation is accessible by way of a link on the server test
			       page that gets installed upon fresh installation.

       /usr/apache/include     Contains the Apache header files, which are needed for building various optional server extensions with apxs(8)

       /usr/apache/jserv       Contains documention for the mod_jserv java servlet module. Documention can be read with a web  browser	using  the
			       url:

			       file:/usr/apache/jserv/docs/index.html

       /usr/apache/libexec     Contains loadable modules (DSOs) supplied with the server. Any modules which are added using apxs(8)are also copied
			       into this directory.

       /usr/apache/man	       Contains man pages for the server, utility programs, and mod_perl.

			       Add this directory to your MANPATH to read the Apache man pages. See NOTES.

       /usr/apache/perl5       Contains the modules and library files used by the mod_perl extension to Apache.

       /var/apache/cgi-bin     Default location for the CGI scripts.

			       This can be changed by altering the httpd.conf file and restarting the server.

       /var/apache/htdocs      Default document root.

			       This can be changed by altering the httpd.conf file and restarting the server.

       /var/apache/icons       Icons used by the server.

			       This normally shouldn't need to be changed.

       /var/apache/logs        Contains server log files.

			       The formats, names, and locations of the files in this directory can be altered by various configuration directives
			       in the httpd.conf file.

       /var/apache/proxy       Directory used to cache pages if the caching feature of mod_proxy is enabled in the httpd.conf file.

			       The location of the cache can also be changed by changing the proxy configuration in the httpd.conf file.

ATTRIBUTES

       See attributes(5) for descriptions of the following attributes:

       +-----------------------------+-----------------------------+
       |      ATTRIBUTE TYPE	     |	    ATTRIBUTE VALUE	   |
       +-----------------------------+-----------------------------+
       |Availability		     |SUNWapchr 		   |
       +-----------------------------+-----------------------------+
       |			     |SUNWapchu 		   |
       +-----------------------------+-----------------------------+
       |			     |SUNWapchd 		   |
       +-----------------------------+-----------------------------+

SEE ALSO

       attributes(5)

       http://www.apache.org

NOTES

       In addition to the documentation and man pages included with Solaris, more information is available at http://www.apache.org

       The  Apache  man pages are provided with the programming modules. To view the manual pages for the Apache modules with the man command, add
       /usr/apache/man to the MANPATH environment  variable. See man(1) for  more information. Running catman(1M) on the Apache  manual  pages	is
       not supported.

SunOS 5.10							    8 Aug 2000								apache(1M)
All times are GMT -4. The time now is 04:08 AM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy