Disabling SELinux is it secure?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



I've been running into several problems setting up FC3 and Apache. The bulk of my problems are the file permissions. If I create a 'www' group so that more than one person can edit files on a web site I run into the following problems.

I create the following directories as root

/var/www/test
/var/www/test/html
/var/www/test/cgi-bin
/var/www/test/logs

I then chown -R root.www /var/www/test

Next I chgrp -R www /var/www/test/html

Finally I chmod -R 775 /var/www/test

After all of this I connect via sftp using Dreamweaver with the user 'user1' who is in group 'www' and I put an index.htm file. I then do a ls -l command on the /var/www/test/html directory to see the permissions on the file. The is chmod'ed 664 and chown'ed user1.user1. Obviously this isn't good for user2 to edit the file and upload it as you get a permissions error.

The umask is set to 0002 for users that log in and 0022 for the root user. If I set the permissions to chmod 2775 /var/www/test/html the permissions seem to work fine when user1 and user2 try to edit the same file etc. However, Apache doesn't like this since it's unsecure and I get a 403 Forbidden error.

My goal (if it's possible) is to have a group of users be able to edit the same file of a site and have Apache still work and not get a 403 Forbidden error.

The only thing I haven't tried is to disable SELinux. Would that fix my problem? Are there any other things I can try?

Thanks for any help!
jay


[Index of Archives]     [Current Fedora Users]     [Fedora Desktop]     [Fedora SELinux]     [Yosemite News]     [Yosemite Photos]     [KDE Users]     [Fedora Tools]     [Fedora Docs]

  Powered by Linux