On 11/29/05, Sage Weaver <sage@xxxxxxxxxxx> wrote: > I have a Debian 3.1 server on which I am currently running Apache 2.0.54 > (packaged by Debian) and PHP 5.0.3 (compiled from source). > > I have used a couple of web applications (CMS software packages) that allow > me to upload files to a specified directory. That directory has setgid > permissions on it, so that all files created inside it are grouped to staff, > allowing anyone in that group to manipulate the files from the command line > if need be. > > I have found that in every instance, Apache ignores the setgid bit. All > files created by the web server are owned by www-data (the default user for > Apache on Debian), and grouped to www-data as well, despite the fact that > the directory is grouped to staff. > > Is this behavior intentional? Can it be changed? If so, how? Apache runs as www-data (IIRC). Is www-data member of group staff? If not, user www-data can't create files owned by group staff.
|