<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<span class="moz-txt-citetags"></span>But drush is still changing
permissions to 750 on the root
<span class="moz-txt-citetags">> > </span> directory on the
remote server. This disables the site until I
<span class="moz-txt-citetags">> > </span> reset the
permissions to 755. <span class="moz-txt-citetags"></span>
<blockquote
cite="mid:mailman.33951.1355768772.5917.support@drupal.org"
type="cite">
<blockquote type="cite" style="color: #000000;">
<pre wrap=""><span class="moz-txt-citetags"> </span>
<span class="moz-txt-citetags">> </span>DocumentRoot should never be able to be read by others. Drush is
<span class="moz-txt-citetags">> </span>doing a good thing here. The DocumentRoot group should match that of
<span class="moz-txt-citetags">> </span>the user id executing httpd. This would allow the httpd user to read
<span class="moz-txt-citetags">> </span>the DocumentRoot directory with 750 permissions.
</pre>
</blockquote>
<pre wrap=""> Thanks Ernie. I will contact the hoster for the appropriate way to
handle this.
cheers</pre>
</blockquote>
Sorry for not using the exact terms, of course it is user - group -
other <br>
where <br>
"user" == file owner and <br>
"other" == the rest of the world.<br>
In filezilla for example it is called owner, group and Public
permissions, but this all boils down to the same point:<br>
<br>
You should not have to make a file world/public/other - accessible
if you want to keep your pants on ;-)<br>
<br>
So right now maybe the file has the following denominations:<br>
drwxrwxr-x daniel daniel yourfolder<br>
which means that the group and owner bits are daniel<br>
if I want to change it to make it accessible not the
world/other/public then I have to set it<br>
chmod 750<br>
Now apache cannot access it, so I have two options:<br>
<ol>
<li>I chown the folder (and subcontent - use with greatest care):<br>
chown -R daniel.www-data yourfolder<br>
This would be the option that you choose if you have a shell
access or someway to change the group of your files.<br>
</li>
<li>I just add apache to the group daniel (not recommended)<br>
</li>
</ol>
(and yes, technically speaking it is user (u) group (g) and other
(o) as in the bash-script that I use to correct my drupal
permissions if I messed something up see
<a class="moz-txt-link-freetext" href="http://mentalitea.com/drupalpermissions">http://mentalitea.com/drupalpermissions</a>.)<br>
<br>
Daniel<br>
</body>
</html>