...
These directories start at /opt/
| Tip |
|---|
Notice the base Unix permissions are more open than ideal. This is due to how masking works with ACLs. |
| Directory | Unix Permissions for serveradmin:staff | ACL and ACL (default)Default | Notes | |
|---|---|---|---|---|
| ./web/ | rwXr-X--X | www-data:rX | www-data:rXn/a | Don't need ACLs here. Use Unix permissions "drwxr-x--x 3 serveradmin staff". |
| ./web/php/ | rwXr-X--X | www-data:rX | www-data:rXn/a | Don't need ACLs here. Use Unix permissions, "drwxr-x--x 4 serveradmin staff". |
| ./web/php/tmp/ | rwXr-X--- | www-data:rwXwww-data:rwX | In a shared environment lock down. Consider ACLs to make it easy for staff to review. | |
| ,/web/php/logs/ | rwXr-X--- | www-data:rwXwww-data:rwX | In a shared environment lock down. Consider ACLs to make it easy for staff to review. | |
| ,/web/php/dailyplanet.com/ | rwXrrwXrwX-X--- | www-data:rX wgdailyplanet:rwX www-data:rX wgdailyplanet:rwX | ||
| ,/web/php/dailyplanet.com/www/ | rwXrrwXrwX-X--- | www-data:rX wgdailyplanet:rwX www-data:rX wgdailyplanet:rwX | ||
| ,/web/dailyplanet.com/blog/ | rwXr-X--- | www-data:rX wgdailyplanet:rwX www-data:rX wgdailyplanet:rwX | ||
| ,/web/dailyplanet.com/blog/wp-content/ | rwXr-X--- | www-data:rwX wgdailyplanet:rwX www-data:rwX wgdailyplanet:rwX | ||
| ./web/php/lexcorp.com/ | rwXr-X--- | www-data:rX wglexcorpwglexcorp:rwX | www-data:rX wglexcorp:rwX | |
| ,/web/lexcorp.com/www/ | rwXr-X--- | www-data:rX wglexcorp:rwX | www-data:rX wglexcorp:rwX | |
| ,/web/lexcorp.com/blog/ | rwXr-X--- | www-data:rX wglexcorp:rwX | www-data:rX wglexcorp:rwX | |
| ,/web/lexcorp.com/blog/wp-content/ | rwXr-X--- | www-data:rwX wglexcorp:rwX | www-data:rwX wglexcorp:rwX |
All directories must be owned by serveradmin:staff
...