Apache2 / httpd "Sharing Write Permission"

Bug #1441887 reported by Scott Bertilson
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Ubuntu Server Guide
Fix Released
Undecided
Doug Smythies

Bug Description

Came across 2 documents which, I think, are suggesting an incorrect group permission setting:

1) https://help.ubuntu.com/lts/serverguide/serverguide.pdf
has the following on page 197:
sudo find /var/www/html -type f -exec chmod g=rws "{}" \;

2) https://help.ubuntu.com/lts/serverguide/httpd.html
has the following at the end of the document:
sudo find /var/www/html -type f -exec chmod g=rws "{}" \;

I'd think that in both cases you'd not want to set the set-group-id bit on an ordinary file that isn't going to be executed.

Related branches

Revision history for this message
Doug Smythies (dsmythies) wrote :

Thank your for your bug report. Please note that the two references provided are compiled from the same source files.

Based on a bunch of tests I just did, the "s" does seem redundant, but not for reasons of execution. I couldn't end up with a file with my primary group name if the directory it was in has the "s" set. So yes, I believe that:

sudo find /var/www/html -type f -exec chmod g=rw "{}" \;

would be good enough.

Peter do you have an opinion?

Revision history for this message
Doug Smythies (dsmythies) wrote :

Based on my tests from early April, I'm going ahead and making the change.

Changed in serverguide:
status: New → In Progress
assignee: nobody → Doug Smythies (dsmythies)
Changed in serverguide:
status: In Progress → Fix Committed
Changed in serverguide:
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.