|
[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]
|
Re: [PLUG] Drupal/CiviCRM Installation
|
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
John:
I agree that the files directory should have ownership as described by others:
(www-data:www-data)
All other Drupal files should be owned by somebody else and have the group set
to www-data with "rwxr-x---" permissions for the directories and "rw-r-----"
permissions for the files. That way, the apache process cannot be compromised
to write files into a directory where they can be served back out.
In the case of my development systems I use a "dev" user so a file looks like this:
-rw-r----- 1 dev www-data 27958 2010-09-22 02:59 index.htm
and a directory looks like this:
drwxr-x--- 3 dev www-data 4096 2010-09-22 16:02 sites
For Drupal security I started here:
http://groups.drupal.org/best-practices-drupal-security
with major help from Justin at:
http://www.madirish.net/security
Have fun!
Eric
On 10/26/2010 01:34 PM, brainbuz@brainbuz.org wrote:
> I'm installing Drupal and CiviCRM and getting what looks like permissions
> errors on the CiviCRM install, even though the Drupal install went fine
> and the permissions are the same.
>
> Error: Could not create directory:
> /var/www/drupal/sites/default/files/civicrm.
>
> I've manually created this directory and verified that permissions are wr
> for everyone.
>
> This install is on Ubuntu Server 10.10
> I had also tried installing on opensuse 11.3 and got hung up by an
> incompatibility with the system date spewing errors on every page, but
> otherwise succeeded on that platform.
>
> P.S. I'm about to get an account with Linode, if anyone has any new
> customer offers or wants to get a referral credit...
>
> ___________________________________________________________________________
> Philadelphia Linux Users Group -- http://www.phillylinux.org
> Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
> General Discussion -- http://lists.phillylinux.org/mailman/listinfo/plug
>
- --
# Eric Lucas
#
# "Oh, I have slipped the surly bond of earth
# And danced the skies on laughter-silvered wings...
# -- John Gillespie Magee Jr
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
iEYEARECAAYFAkzIUxAACgkQ2sGpvXQrZ/63YwCdEQarZjsv1w+1HmF1v0gPs5J7
+SwAoPjkJektENZ2Em4Vkr043VSVEyBU
=iSu5
-----END PGP SIGNATURE-----
___________________________________________________________________________
Philadelphia Linux Users Group -- http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion -- http://lists.phillylinux.org/mailman/listinfo/plug
|
|