Do not recommend making data dir 777/world-writable #326

New issue

Open

opened 2020-05-26 12:43:54 +00:00 by matthijskooijman · 0 comments

matthijskooijman commented

2020-05-26 12:43:54 +00:00

(Migrated from github.com)

The README currently says to make the data directory world-writable, but that is generally a bad idea. The goal is to make the data directory writable by the webserver, but there are often better ways to achieve that, depending on the hosting setup (sometimes all files are already writable, sometimes changing the owner to www-data is needed, sometimes setting group write permissions, it really depends).

Making the data dir world-writable pretty much always works, but also opens up the permissions way too wide, potentially allowing abuse.

The README currently says to make the data directory world-writable, but that is generally a bad idea. The goal is to make the data directory writable by the webserver, but there are often better ways to achieve that, depending on the hosting setup (sometimes all files are already writable, sometimes changing the owner to `www-data` is needed, sometimes setting group write permissions, it really depends). Making the data dir world-writable pretty much always works, but also opens up the permissions way too wide, potentially allowing abuse.

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

harmen/hypha#326

No description provided.

Rows
Columns