Linux File Permissions - Revision history

Ssumathi at 14:24, 16 May 2017

2017-05-16T14:24:37Z

← Older revision		Revision as of 17:24, 16 May 2017
Line 1:		Line 1:
	Author : Sheela ~~Gowry Raju~~		Author : Sheela Raj

	Group : Cyber Security Engineering		Group : Cyber Security Engineering

Ssumathi: /* References */

2016-06-01T14:29:22Z

References

← Older revision		Revision as of 17:29, 1 June 2016
Line 241:		Line 241:
	[https://en.wikipedia.org/wiki/File_system_permissions File System Permissions]		[https://en.wikipedia.org/wiki/File_system_permissions File System Permissions]

	= References =		==References==
			{{Reflist\|30em}}
	~~<references/>~~


	[[Category:Operatsioonisüsteemide administreerimine ja sidumine]]		[[Category:Operatsioonisüsteemide administreerimine ja sidumine]]

Ssumathi: /* References */

2016-06-01T14:22:10Z

References

← Older revision		Revision as of 17:22, 1 June 2016
Line 243:		Line 243:
	= References =		= References =

	*<references/>		<references/>


	[[Category:Operatsioonisüsteemide administreerimine ja sidumine]]		[[Category:Operatsioonisüsteemide administreerimine ja sidumine]]

Ssumathi: /* References */

2016-06-01T14:22:00Z

References

← Older revision		Revision as of 17:22, 1 June 2016
Line 243:		Line 243:
	= References =		= References =

	* <references/>		*<references/>


	[[Category:Operatsioonisüsteemide administreerimine ja sidumine]]		[[Category:Operatsioonisüsteemide administreerimine ja sidumine]]

Ssumathi: /* References */

2016-06-01T14:21:24Z

References

← Older revision		Revision as of 17:21, 1 June 2016
Line 243:		Line 243:
	= References =		= References =

	<references/>		* <references/>


	[[Category:Operatsioonisüsteemide administreerimine ja sidumine]]		[[Category:Operatsioonisüsteemide administreerimine ja sidumine]]

Ssumathi: /* References */

2016-06-01T14:19:46Z

References

← Older revision		Revision as of 17:19, 1 June 2016
Line 243:		Line 243:
	= References =		= References =

			<references/>


	[[Category:Operatsioonisüsteemide administreerimine ja sidumine]]		[[Category:Operatsioonisüsteemide administreerimine ja sidumine]]

Ssumathi: /* References */

2016-06-01T14:13:28Z

References

← Older revision		Revision as of 17:13, 1 June 2016
Line 242:		Line 242:

	= References =		= References =
	~~{{reflist\|30em}}~~

Ssumathi: /* References */

2016-06-01T14:12:54Z

References

← Older revision		Revision as of 17:12, 1 June 2016
Line 242:		Line 242:

	= References =		= References =
			{{reflist\|30em}}

Ssumathi: /* The dangers of 777 */

2016-06-01T14:10:37Z

The dangers of 777

← Older revision		Revision as of 17:10, 1 June 2016
Line 228:		Line 228:
	Often the Apache server is 'owned' by the '''www-data''', '''dhapache''' or '''nobody''' user accounts. These accounts have a limited amount of access to files on the server, for a very good reason. By setting your personal files and folders owned by your user account to be World-Writable, you are literally making them World Writable. Now the www-data, dhapache and nobody users that run your server, serving pages, executing php interpreters, etc.. will have full access to your user account files.		Often the Apache server is 'owned' by the '''www-data''', '''dhapache''' or '''nobody''' user accounts. These accounts have a limited amount of access to files on the server, for a very good reason. By setting your personal files and folders owned by your user account to be World-Writable, you are literally making them World Writable. Now the www-data, dhapache and nobody users that run your server, serving pages, executing php interpreters, etc.. will have full access to your user account files.

	This provides an avenue for someone to gain access to your files by hijacking basically any process on your server, this also includes any other users on your machine. So you should think carefully about modifying permissions on your machine. Generally its not required more than 767, so when you see 777 ask why its necessary. <ref name=CFP> [http://codex.wordpress.org/Changing_File_Permissions] </ref>		This provides an avenue for someone to gain access to your files by hijacking basically any process on your server, this also includes any other users on your machine. So you should think carefully about modifying permissions on your machine. Generally its not required more than 767, so when you see 777 ask why its necessary. <ref name=CFP> [http://codex.wordpress.org/Changing_File_Permissions]Changing File Permissions</ref>

	=== The Worst Outcome ===		=== The Worst Outcome ===

Ssumathi: /* Examples of Modes and Permissions */

2016-06-01T14:10:05Z

Examples of Modes and Permissions

← Older revision		Revision as of 17:10, 1 June 2016
Line 199:		Line 199:
	\|}		\|}

	The above table illustrates the permissions and explanations of specific mode. <ref name=LC> [http://linuxcommand.org/lts0070.php] </ref>		The above table illustrates the permissions and explanations of specific mode. <ref name=LC> [http://linuxcommand.org/lts0070.php] Linux Commands</ref>

	A list of all numeric permissions from 0000 to 0777 can be found from the ''chmod'' ''commands'' referred below. <ref name=CC> [http://www.askapache.com/security/chmod-stat.html#chmod-0-to-7777] </ref>		A list of all numeric permissions from 0000 to 0777 can be found from the ''chmod'' ''commands'' referred below. <ref name=CC> [http://www.askapache.com/security/chmod-stat.html#chmod-0-to-7777]chmod commands</ref>

	Image2 illustrates how the permissions are calculated in binary. <ref name=FFP> [http://www.firewall.cx/linux-knowledgebase-tutorials/introduction-to-linux/299-linux-file-folder-permissions.html] </ref>		Image2 illustrates how the permissions are calculated in binary. <ref name=FFP> [http://www.firewall.cx/linux-knowledgebase-tutorials/introduction-to-linux/299-linux-file-folder-permissions.html]File and folder permissions</ref>

	=The dangers of 777 =		=The dangers of 777 =