Author: Matthew Byng-Maddick Date: To: Roger Light CC: users, baechler Subject: Re: [bitfolk] File and folder permissions for static web pages
On Tue, Mar 12, 2013 at 01:34:57PM +0000, Roger Light wrote: > On Tue, Mar 12, 2013 at 1:29 PM, Samuel Bächler <baechler@???> wrote:
>> (drwxrw----> -> drw-rw----)
> "x" means "search" in the context of directories, not execute.
No, it doesn't. "x" means "enter" - ie, you can't enter the directory
if you don't have execute permission. You can "search"/"read" it, but
only if you have read permission, and you can put files in there if
you have write permission.
The permissions you *actually* want for a web root are:
drwxr-xr-x root root
This is because the owner is allowed to change the permissions, so you
don't want your webserver to be able to write to its own serving
directory, and you need it to be able to search and actually chdir() into
that directory.
