By Continental on

Hi,

where I cand find answers about what file permisson should be for drupal installation?
I'm interested in
setting.php
public_html
files/upload
other folders and files.

I've found some http://drupal.org/node/26635 near, but I still can't trust all this script because I even don't understand what files are changer because of complicated sintaxis. If anybody could explain it for dummies e.g. "this file/folder" must/should/better be "this permission". I need everything working and max. secure.

I also installed security module but this making alnost nonthing. Everythis is ok, but I don't believe =)

⋅ Categories: Drupal 4.6.x

Comments

luno’s picture

luno commented

At a minimum, everything needs to be readable (chmod +rX) by the webserver uid. files/upload should also be writable (chmod +w), however some modules write elsewhere in files, so you may want that writable as well.

If possible, have everything owned as another user, not the webserver uid.

Continental’s picture

Continental commented

Hm.. +rX is new for me, I used before just 775, 755, 644 e.t.c... sometimes with "0" or "4" before.
Currently, I have e.g.
drwxr-xr-x 2 admin admin 1024 Dec 1 16:29 default

After +rX, then +w it becomes:
-rw-r--r--

How do I check if it is under webserver uid or nor? admin isn't webserver user (it's apache). what is "D"?

Could you please, give me exact instruction what I have do to on the whole drupal installation like: chmod -R 644 (or what?) and what I should see then like -rw-r--r-- user user?

sorry for dummy question but I think I need to understand it all before...

luno’s picture

luno commented

Without repeating the man page, chmod has two modes, symbolic and octal. You're used to using octal, apparently, which is fine, but takes a bit more work for this case. I suggest consulting man chmod and man ls on your system to understand the particulars.

As for seeing your user/group id under apache, the easiest way is to create a page with the following php snippet:

  passthru("id -a");

When you view the page, this will show you your user id, followed by all the groups that the webserver process belongs to.