NYCPHP Meetup

NYPHP.org

[nycphp-talk] Apache configuration question

Analysis & Solutions danielc at analysisandsolutions.com
Tue Sep 10 00:21:38 EDT 2002


Hey Mike:

On Mon, Sep 09, 2002 at 11:48:21PM -0400, Mike Myers wrote:
> 
> Within our intranet, my department uses a WinNT sharevolume to store shared
> documents, mostly PDFs and MS Office files.
... snip ...
> Here's the rub: the files in the mounted directory are owned by my OSX user
> account, not the "www" or "nobody" account usually applied to the Apache
> instance.

Give the files/directories/shares you want to share read permissions for
the "nobody" account.  No big deal security wise.  You want them to be
public.  So, if some unforseen circumstance arises, the exposure is the
same as if they wound up there with a web browser.

I wouldn't change the ownership of the files/directories etc.  Keep them
owned by you.  Making them owned by "nobody" would create a far greater
potential for exploitation.

--Dan

-- 
               PHP classes that make web design easier
        SQL Solution  |   Layout Solution   |  Form Solution
    sqlsolution.info  | layoutsolution.info |  formsolution.info
 T H E   A N A L Y S I S   A N D   S O L U T I O N S   C O M P A N Y
 4015 7 Av #4AJ, Brooklyn NY     v: 718-854-0335     f: 718-854-0409



More information about the talk mailing list