Home / server / Questions / 274201
Accepted
bMon
Asked: 2011-05-27 11:37:02 +0800 CST

File permission security for webapps

  • 772

I have a typically configured LAMP server with various web apps running on it.

A few of the web apps require user supplied image upload functionality (as well as a couple WP blogs that need to upload images).

I have tried to tighten my permission security, and I am finding that 767 is the best I can have on my /uploads/ directory.

I've read that 755 or 750 are the best for directories, but my uploads won't take when set with them.

So my question: is 767 safe? Or should I take the time to get under the hood and try to get 755 or 750 working somehow?

permissions lamp file-permissions

1 Answers

  1. Best Answer

    If you are allowing uploads into a directory wherein files can be executed, you're asking for trouble. 666 would be far more appropriate. Root doesn't need to be executing things in an upload directory. No one needs to be executing anything in that directory. For my money, I'd do 262.

    You literally cannot have too much security on a directory that contains user uploaded files.

    • 0