Re: Permissions

On 08/27/2013 03:31 PM, Steven Post wrote:
> On Tue, 2013-08-27 at 13:43 -0400, Ethan Rosenberg wrote:
>> Dear List -
>>
>> I apologize for this "needle in a haystack"  but...
>>
>> This was originally posted on the PHP list, but has changed into a
>> Debian question...
>>
>> Tried to run the program, that we have been discussing,{on the PHP list}
>> and received a 403 error.
>>
>> rosenberg:/var/www# ls -la StoreInventory.php
>> -rwxrwxrw- 1 ethan ethan 4188 Aug 26 20:26 StoreInventory.php
>>
>> rosenberg:/var# ls -ld www
>> drwxrwxrw- 37 ethan ethan 20480 Aug 26 20:26 www
>>
>> I had set the S bit [probably a nasty mistake] and I thought I was able
>> to remove the bit. [it doesn't show above]
>>
>> I made the following stupid mistakes...
>> note commands from the root prompt have a su appended
>>
>>     467  chown -R ethan:www-data www 	su
>>     469  chown -R ethan:www-data www 	su
>>     470  chmod -R g+s www 	su
>>     471  chgrp -R  www 		su
>>     477  chgrp -R ethan www 	su	
>>     480  chmod -R 766 www 	su
>>     482  chmod g-S www 	su
>>     485  chmod -S www 		su
>>     486  chmod g S www 	su
>>     487  chmod gS www 		su
>>     488  chmod S www 		su
>>     489  chmod 776 www 	su
>>     492  chmod 776 -R www 	su
>>     494  chmod -s -R www 	su
>>     504  chmod 666 StoreInventory.php
>>     512  chmod 3775 StoreInventory.php
>>
>> I now have....
>>
>> ethan@rosenberg:/var/www$ ls -la StoreInventory.php
>> -rwxrwsr-t 1 ethan ethan 4232 Aug 27 00:18 StoreInventory.php
>>
>> ethan@rosenberg:/var$ ls -ld www
>> drwxrwxrw- 37 ethan ethan 20480 Aug 26 20:26 www
>>
>> and still have the 403 error.
>>
>> How do I extricate myself from the hole into which I have planted myself?
>>
>
> The problem appears to be that Apache does not have access to the file.
> Looking at the permissions of the file it should work, however, apache
> is not able to go into your /var/www folder. Either you need to set
> www-data as the owner of the directory, or as the group owner, or,
> possibility number 3, give execute rights to 'others' on that folder.
>
> Pick one (you might need to be root for the first 2 in your situation):
> 1) chown www-data /var/www
> 2) chgrp www-data /var/www
> 3) chmod -R o+X /var/www
>
> Note the capital 'X' on option 3, this gives execute permissions on
> folders only, not files, as the -R means all files and subdirectories as
> well.
>
> The 't' is known as the sticky bit if I recall correctly, set with 1 on
> the first number in a 4 number chmod command, for details see [1].
> I guess in your case you can use 0664 for the files and 0775 for
> directories (or 0640 and 0750 if you set owner or group back to
> www-data)
>
> Best regards,
> Steven
>
>
you wrote about a 403 error, so I assume you invoke the script by
calling a webserver via browser.
In that case the webserver needs the permission to access /var/www and
to read StoreInventory.php.

By default the webserver runs as user/group www-data (it can be changed
in the webservers config-file(s)).

Try this:

#chown -R ethan:www-data /var/www
#chmod 775 /var/www
#chmod 640 /var/www/StoreInventory.php

Your ls should return something like this:

$ls -hal /var/www
drwxr-x--- 1 ethan www-data 4.0K Jun 3 20:35 .
-rw-r----- 1 ethan www-data 623 Jun 3 20:35 StoreInventory.php


If that does not work you might check the configuration- and log-files
of your webserver.

Dear List -

I had to go to a meeting but before I left I tried one last thing -

  chmod 000 www
  chmod 0777 www
rosenberg:/var# ls -ld www
drwxrwxrwx 37 ethan ethan 20480 Aug 27 17:30 www

  chown ethan StoreInventory.php
  chgrp ethan StoreInventory.php
  chmod 000 StoreInventory.php
  chmod 777 StoreInventory.php
ethan@rosenberg:/var/www$ ls -la StoreInventory.php
-rwxrwxrwx 1 ethan ethan 4232 Aug 27 17:25 StoreInventory.php

when I returned...

IT WORKS!!!

Thanks to all.

Ethan