Directory permissions: new install

[rgillis]

Hi There,

I have OJS (2.3.7) up and running just fine, but I'm wondering about the permissions for the directories in the install that don't necessarily have to be writable (e.g. cache, public, etc.) in order for OJS to function properly. I'm wondering what permissions would be suggested for the other directories should be set to.Here is how the permissions currently look:

Code: Select all

drwxrwxrwx  7 root   root   32768 May 15 15:48 cache
drwxrwxrwx 33 root   root    4096 May  9 15:57 classes
-rw-rw-rw-  1 root   root   13586 May 15 09:52 config.inc.php
-rw-rw-rw-  1 root   root   13587 May 14 17:03 config.inc.php~
-rw-rw-rw-  1 root   root   13583 May  9 15:57 config.TEMPLATE.inc.php
drwxrwxrwx  3 root   root    4096 May  9 15:57 controllers
drwxrwxrwx  3 root   root    4096 May  9 15:57 dbscripts
drwxrwxrwx  3 root   root    4096 May  9 15:57 docs
-rw-rw-rw-  1 root   root    1150 May  9 15:57 favicon.ico
drwxrwxrwx 16 root   root    4096 May  9 15:57 help
drwxrwxrwx  2 root   root    4096 May  9 16:03 html
-rw-rw-rw-  1 root   root     177 May  7 20:19 index.html-backup
-rw-rw-rw-  1 root   root    2748 May  9 15:57 index.php
drwxrwxrwx  2 root   root    4096 May  9 15:57 js
drwxrwxrwx  3 root   root    4096 May  9 15:57 lib
drwxrwxrwx 27 root   root    4096 May  9 15:57 locale
drwxrwxrwx 29 root   root    4096 May  9 15:57 pages
drwxrwxrwx 14 root   root    4096 May  9 15:57 plugins
drwxrwxr-x  4  root    root    4096 May 14 15:04 public
drwxrwxrwx  2 root   root    4096 May  9 15:57 registry
-rw-rw-rw-  1 root   root      31 May  9 15:57 robots.txt
drwxrwxrwx  5 root   root    4096 May  9 15:57 rt
drwxrwxrwx  2 root   root    4096 May  9 15:57 styles
drwxrwxrwx 31 root   root    4096 May  9 15:57 templates
-rw-rw-rw-  1 root   root      20 May  8 20:45 testphp.php~
drwxrwxrwx  2 root   root    4096 May  9 15:57 tools


Should some of these directory permissions be changed? Or are they fine as is?

Thanks,


Roger

[asmecher]

Hi Roger,

It may work, but it certainly isn't safe; those permissions will allow any user on the same server to modify a number of directories. Unfortunately it's hard for us to provide a single set of instructions for file permissions since every system is a little different, but there is a FAQ on the subject: http://pkp.sfu.ca/wiki/index.php/PKP_Frequently_Asked_Questions#I.27m_having_file_permission_problems.3B_how_should_I_set_file_permissions.3F

Regards,
Alec Smecher
Public Knowledge Project Team

[makemywish]

Hi Alec

On my server the Server API returns "Apache 2.0 Handler".

I have set permissions to nobody:nobody

That permits uploads. When I set it to user:user we are unable to upload documents.

Thanks in advance
makemywish