digital.forest Technical Support
Permissions change to Souari

A change has been made to Souari that may affect some of your code. Recently we discovered that some of our customers had some of their directories set to "777" in other words: read (r), write (w) and execute (x) by everyone. This poses a major risk to security to the system as it was allowing a guest (unauthorized user) create files within your directory.

The way an Unix-based operating system works is that it has 3 sets of access.
First set is for the username that owns the directory and/or files
Second set is for the group name that owns the directory and/or files
Third set is for everyone else.

We have now made it so that this happens:
First set (the user) has full read (r), write (w) & execute (x). This doesn't change.
Second set (the group) has read (r) & execute (x). This changes from read (r), write (w), and execute (x).
Thrid set (the guest / other) has read (r) & execute (x). This changes from read (r), write (w), and execute (x).

The reason we are doing this is to protect everyone's data. This may be a small inconvienence to some (primarily those that have scripts that generate HTML pages on demand, for example some older blogging software), but its a major benefit to security.

This change has already been made on Souari. A script has been made to check these settings every 6 hours and if the directory is 777, it will change it back to 755. We may make this change to our other Unix-based machines in the near future.

-digital.forest technical support

posted by digital.forest at 10:11 AM on Tuesday, March 28, 2006
Categories: souari.forest.net