php 创建文件为什么root,phptouch创建的文件属于root???如何修改

这篇技术文章介绍了如何在Debian系统中设置用户权限,特别是创建'www'组,并将用户加入该组,确保对'/var/www'目录的适当访问权限。通过修改文件和目录的所有权、权限以及使用sudoers文件,允许用户更改其所有目录的权限以适应Apache服务器需求。这种方法避免了所有目录都可被Apache进程写入的问题,确保了系统的安全性。
摘要由CSDN通过智能技术生成

30,028 posts

LocationSydney, Australia.

Posted 29 December 2009 - 06:30 PM

The way I normally setup Debian systems is as follows:

1) As root, create a new group called 'www' then place yourself within that group, logout and back in for it to take effect.

sudo groupadd www

sudo gpasswd -a www

logout

2) Make the entire /var/www directory structure be owned by 'www-data' and the 'www' group. Give users belonging to the 'www' group write permissions, then set the sticky bit on the group for this directory structure so that any new directories created will take on these same permissions.

sudo chown -R www-data:www /var/www

sudo find /var/www -type f -exec chmod 664 {} \;

sudo find /var/www -type d -exec chmod 775 {} \;

sudo find /var/www -type d -exec chmod g+s {} \;

That should now give you sufficient permissions to create directories and files within /var/www manually (ie: Via a terminal). If you want these directories to be writtable by the server process you will however need to chown them to www-data:www. Any new directories created by the Apache process will automatically be owned by www-data:www.

3) Allow users within the 'www' group to change directories they own within /var/www to be owned by 'www-data:www'.

sudo sudoedit /etc/sudoers

Then add the following line.....

%www ALL = NOPASSWD: /bin/chown www-data /var/www/*, /bin/chown -R www-data /var/www/*

This means users within the 'www' group can now execute....

sudo chown www-data /var/www/on directories they own, making them writtable via the Apache process.

That's basically it. Allot of people like to simply join the www-data group and set the sticky bit on /var/www but you generally don't want all directories to be writtable by the Apache process.

.

http://thorpesystems.com | http://proemframework.org | http://github.com/trq

SmtpCatcher - A very simple mock sendmail useful for testing PHP mail scripts.

本条技术文章来源于互联网,如果无意侵犯您的权益请点击此处反馈版权投诉

本文系统来源:php中文网

评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值