Minumun permisions tu run SMF.

Started by shackles, February 27, 2011, 10:00:10 AM

Previous topic - Next topic

shackles

Hi, i would like to know what so minumun file permisions would be witch wouldnt affect the forums stability.

Example i have folders on 755 and files on 644, we can go less that that right?, i am not bothered that if a go to low on permisions i cant change things via smf admin panel, thats even better lol.


Best Regards.

Arantor

You can run it all on files 400, folders 600 if the user that is the web server owner is the owner of the files.

644/755 is a sensible minimum, file owner can edit files, everyone else can read them - required for most sites where the web server user is not the file owner.
Holder of controversial views, all of which my own.


MrPhil

What are you trying to accomplish here? Otherwise, your question sounds more like a homework assignment for a CS class. 755 for directories and 644 for files is the normal setting. You may need to go to 444 (read only) for Settings.php, and you may need to grant write access (+2) to group and perhaps even world for certain directories or files that SMF needs to write to. Hold off on such a change until you get error messages from SMF that it can't write a certain directory or file. Are you having problems with people getting into the wrong places? Read my sig > FAQs > "Proper Permissions" entry before making any changes.

shackles

I just want to do it for security reasons. I dont want to be able to change stuff via smf admin panel.
My folders are at 755, files at 644, and settings at 444. Just wondering if i could put them down less, so that it wouldnt affect users using the forums properly.

Would 600 and 400 be ok?,that way i could only change things via cpanel, yes?

Thanks For replys.

Arantor

QuoteWould 600 and 400 be ok?,that way i could only change things via cpanel, yes?

Yes as I already said, IF and only IF the owner of the files is the same user as the web server itself, since 400 means only the file's owner can access it. Most websites will simply not work using 400.

In reality, 644/755 is absolutely safe because the files can't be modified then except by their owner (and if you made them 400, you'd only have to re-chmod them just to be able to edit them later)
Holder of controversial views, all of which my own.


rudeboy1991

Ok, if 644 & 755, are safe. I will stick with these.
Thanks for the replys

Advertisement: