folder permission levels

hi guys.. want to confirm if the permission levels i am setting in my hosting account safe.. I set the root and all the folders under it with permissions to the server user as read and execute. However, i set read, write and execute permissions for cache, cache_public and tmp folders.. is this permission setup adequate yet safe?

Thanks!

Quote · 28 Feb 2014

Depends on what way you are running apache:  dso, suphp, fastcgi  .....   

https://dolphin-techs.com - Skype: Dolphin Techs
Quote · 28 Feb 2014

 

Depends on what way you are running apache:  dso, suphp, fastcgi  .....   

Since you mentioned this, I asked about this in my Server reloaded with WHM/cPanel-Dolphin crying 500 post.  I set it on dso since I got no answers on that topic.  What do you recommend?

Geeks, making the world a better place
Quote · 28 Feb 2014

Well like i said ...   i run nginx, fastcgi, apc on some of my builds  and run  755, 644 permissions.  

https://dolphin-techs.com - Skype: Dolphin Techs
Quote · 28 Feb 2014

I was trying to set things to get the most out of the build.  It seems to me the site is loading a bit slower than it did on my Nginx/PHP-FPM build. 

Geeks, making the world a better place
Quote · 28 Feb 2014

Hello

This indeed depends on the configuration. When running dso, I would recommend you enabling mod_ruid2. That way files can be executed from your cPanel user and you can keep the 755 permissions for folders and 644 for files. 

More information about mod_ruid2 is available at:

http://docs.cpanel.net/twiki/bin/view/EasyApache3/ModRuid2

Quote · 28 Feb 2014

If you want i can log back into the server and tweak a bit to improve speed.

https://dolphin-techs.com - Skype: Dolphin Techs
Quote · 28 Feb 2014
Apache 2.4.7
[More Info ↑] Access
[More Info ↑] Actions
[More Info ↑] Alias
[More Info ↑] AuthnDefault
[More Info ↑] AuthzHost
[More Info ↑] Autoindex
[More Info ↑] Cache
[More Info ↑] DIR
[More Info ↑] Deflate
[More Info ↑] Disk Cache
  This option will make the following changes to your profile prior to the build:

Enables:
  Cache

[More Info ↑] Expires
[More Info ↑] File Cache
  Fileprotect
  Prevent Users from reading other webroots
[More Info ↑] Headers
[More Info ↑] Log Config
[More Info ↑] MPM Event
  PHP may not be run as an Apache DSO (mod_php) while this MPM is in use
[More Info ↑] Mime
[More Info ↑] Negotiation
[More Info ↑] Mod SuPHP
  This option will make the following changes to your profile prior to the build:

Enables:
  CGI

[More Info ↑] Proxy
  required for cPanel/WHM/Webmail/Webdisk proxy VirtualHost support
[More Info ↑] Setenvif
[More Info ↑] Status
  Symlink Race Condition Protection
[More Info ↑] UniqueId
[More Info ↑] Userdir
[More Info ↑] Mod Security
  v2.7.7 for Apache 2.2 and 2.4 This option will make the following changes to your profile prior to the build:

Enables:
  UniqueId

[More Info ↑] EAccelerator for PHP
  v0.9.6.1 - caches compiled PHP pages ONLY when running in a persistent (DSO/FCGID) manner
 
PHP 5.4.25
[More Info ↑] Bcmath
[More Info ↑] Calendar
[More Info ↑] CurlSSL
  This option will make the following changes to your profile prior to the build:

Disables:
  Curl

[More Info ↑] Exif
[More Info ↑] FTP
[More Info ↑] GD
  This option will make the following changes to your profile prior to the build:

Enables:
  Zlib

[More Info ↑] Gettext
[More Info ↑] Imap
[More Info ↑] Mbstring
[More Info ↑] Mcrypt
[More Info ↑] Mysql
  compile MySQL support using the PHP bundled libraries (if the System MySQL option is checked it takes precedence over this option)
[More Info ↑] Mysql of the system
  compile mysql (and mysqli if its checked) support against the system libraries
[More Info ↑] MySQL "Improved" extension.
  MySQLi does not replace the standard MySQL extension. Requires MySQL 4.1 or later. !! mysqli may not work on all systems, contact your support provider for mysqli support !!
[More Info ↑] Openssl
  Requires OpenSSL 0.9.7 or newer
[More Info ↑] PDO
  Includes SQLite support. MySQL support is available. If you plan on installing or updating PDO drivers (freetds, oracle, etc) via PECL you might want to skip this option as PECL will install the version of PDO it has. This option will make the following changes to your profile prior to the build:

Enables:
  SQLite3

[More Info ↑] PDO MySQL
  This option will make the following changes to your profile prior to the build:

Enables:
  PDO

  Path Info Check
[More Info ↑] PGsql
  Requires PostgreSQL 7.3 or higher to already be installed. You can do that with /scripts/installpostgres
  Safe PHP CGI
  prevents users from overriding system php.ini
[More Info ↑] Sockets
[More Info ↑] System Timezone
  Use system timezone data in /usr/share/zoneinfo instead of PHP timezonedb
[More Info ↑] TTF (FreeType)
[More Info ↑] XSL
[More Info ↑] XmlRPC
[More Info ↑] Zip
[More Info ↑] Zlib
  Requires that zlib is installed and up to date
  Save my profile with appropriate PHP 5 options set so that it is compatible with cpphp
  This option will make the following changes to your profile prior to the build:

Enables:
  CurlSSL
  FTP
  GD
  Gettext
  Iconv
  Imap
  Mbregex
  Mbstring
  Mysql
  Mysql of the system
  PGsql
  Sockets
  System Timezone
  Zlib

Disables:
  MailHeaders

caredesign.net
Quote · 28 Feb 2014

 

If you want i can log back into the server and tweak a bit to improve speed.

Oh yeah, we were going to look over things.  If you don't mind doing that.

I was asking for the second WHM/cPanel server, not the one we did the restore on.  However, he told me that he had been trying to do some tweaks so if you have the time, yes, please look over the settings and see if anything is not as it should be.

Geeks, making the world a better place
Quote · 28 Feb 2014

 

Hello

This indeed depends on the configuration. When running dso, I would recommend you enabling mod_ruid2. That way files can be executed from your cPanel user and you can keep the 755 permissions for folders and 644 for files. 

More information about mod_ruid2 is available at:

http://docs.cpanel.net/twiki/bin/view/EasyApache3/ModRuid2

Yes, on the new server I did have to set some permission outside of what I normally do.  I will read up on mod_ruid2.

Geeks, making the world a better place
Quote · 28 Feb 2014

Ok email the info for the second server as well.  

https://dolphin-techs.com - Skype: Dolphin Techs
Quote · 28 Feb 2014

@tmd - could you give more explanation as to what the mod_ruid2 does. I had DSO with Eaccelerator, but never the mod_ruid and all worked well. Will it enhance performance any?

caredesign.net
Quote · 28 Feb 2014
 
 
Below is the legacy version of the Boonex site, maintained for Dolphin.Pro 7.x support.
The new Dolphin solution is powered by UNA Community Management System.