Disabling SELinux is it secure?
Jay Paulson
jpaulson at sedl.org
Thu Mar 3 15:57:02 UTC 2005
I've been running into several problems setting up FC3 and Apache. The
bulk of my problems are the file permissions. If I create a 'www'
group so that more than one person can edit files on a web site I run
into the following problems.
I create the following directories as root
/var/www/test
/var/www/test/html
/var/www/test/cgi-bin
/var/www/test/logs
I then chown -R root.www /var/www/test
Next I chgrp -R www /var/www/test/html
Finally I chmod -R 775 /var/www/test
After all of this I connect via sftp using Dreamweaver with the user
'user1' who is in group 'www' and I put an index.htm file. I then do a
ls -l command on the /var/www/test/html directory to see the
permissions on the file. The is chmod'ed 664 and chown'ed user1.user1.
Obviously this isn't good for user2 to edit the file and upload it as
you get a permissions error.
The umask is set to 0002 for users that log in and 0022 for the root
user. If I set the permissions to chmod 2775 /var/www/test/html the
permissions seem to work fine when user1 and user2 try to edit the same
file etc. However, Apache doesn't like this since it's unsecure and I
get a 403 Forbidden error.
My goal (if it's possible) is to have a group of users be able to edit
the same file of a site and have Apache still work and not get a 403
Forbidden error.
The only thing I haven't tried is to disable SELinux. Would that fix
my problem? Are there any other things I can try?
Thanks for any help!
jay
More information about the fedora-list
mailing list