write permissions for Apache?

Hi,

just noticed that my server's apache doesn't have write permissions to folders inside the public_html folder.

is it safe change the permission for Apache and if yes how?

Thanks

[Join us @ facebook]

I don't know which is the common technique to that, but I personally give ownership to the whole www directory to the account nobody:nogroup

This way both Apache and the cgi services can write with no problems.

is there a way to automate this?

[Join us @ facebook]

First you need to run this command in console :

Code:

chown nobody:nogroup -R /path/to/htdocs

Then you can use this directive in httpd.conf:

Code:

User nobody
Group nogroup

I use this config in my account template?

User nobody
Group nogroup

[Join us @ facebook]

I am not sure what you mean "account template" but this is the rule that should be in the httpd.conf file, and I don't think it is a rule that can be applied through .htaccess or something else.

I am not sure what you mean "account template" but this is the rule that should be in the httpd.conf file, and I don't think it is a rule that can be applied through .htaccess or something else.

OK I understand, this setting is for all hosting accounts, is there a place I need to add this setting?

[Join us @ facebook]

It is in the "section 2" of the configuration file. BTW now I see it again the correct way to use it is like this :

Code:

<IfModule !mpm_winnt.c>
<IfModule !mpm_netware.c>
#
# If you wish httpd to run as a different user or group, you must run
# httpd as root initially and it will switch. 
#
# User/Group: The name (or #number) of the user/group to run httpd as.
#  . On SCO (ODT 3) use "User nouser" and "Group nogroup".
#  . On HPUX you may not be able to use shared memory as nobody, and the
#    suggested workaround is to create a user www and use that user.
#  NOTE that some kernels refuse to setgid(Group) or semctl(IPC_SET)
#  when the value of (unsigned)Group is above 60000;
#  don't use Group #-1 on these systems!
#
User nobody
Group nogroup
</IfModule>
</IfModule>

I have a modified http conf file (Directadmin), but I guess I can add the whole rule...

[Join us @ facebook]

Of course you can

Be sure to restart apache then

[Guest]

[62.884]

Googlebot, EssayPartner, Yahoo crawler