Logging/service users comes to mind. Have a user specifically to own a service, and the service needs to write to a file, but there's no reason to give it read access to all your files since you read them as your own user or as root. That way, if someone has an exploit for your apache service readily available, they can't see your entire connection history, they can just deface your website or nuke it--keeps user data private even if you get compromised.
On Sun, Dec 21, 2014 at 1:12 AM, Michael Havens <[email protected]> wrote: > is there a purpose to giving a file 'write' permission but not 'read'. > > :-)~MIKE~(-: > > On Sat, Dec 20, 2014 at 3:52 PM, druid001 . <[email protected]> wrote: > >> the "d" means the directory. the first rwx is for the "owner" and means >> he has complete control over reading, writing and executing. The next >> three, r-x is for the "group", and means they can read the file and execute >> it but not modify it, and the last is for the "anyone" category and means >> that they too can only read and execute the file. >> >> On Sat, Dec 20, 2014 at 1:29 PM, Bob Wallace <[email protected]> >> wrote: >> >>> On 12/20/2014 01:04 PM, Michael Havens wrote: >>> >>>> bmike1@c521 ~ $ ls -l ~ >>>> total 64 >>>> drwxr-xr-x 2 bmike1 bmike1 4096 Dec 18 20:15 Desktop >>>> --etc-- >>>> >>>> in the above ls output what do the third and fourt fields represent? >>>> . >>>> . >>>> . >>>> oh yeah. 'owner' and 'group'! is it in that order? >>>> :-)~MIKE~(-: >>>> >>> >>> Following that first (single) character/field, it's owner, group, anyone >>> for the three sets of characters, rwx, in each of those positions. >>> >>> -Bob >>> >>> >>> --------------------------------------------------- >>> PLUG-discuss mailing list - [email protected] >>> To subscribe, unsubscribe, or to change your mail settings: >>> http://lists.phxlinux.org/mailman/listinfo/plug-discuss >>> >> >> >> >> -- >> Love, sex, food, friendship, play, beauty and the simple pleasure of a >> cold beer are all well and good, but never forget that the universe is >> determined to kill you by whatever means necessary. >> >> >> >> --------------------------------------------------- >> PLUG-discuss mailing list - [email protected] >> To subscribe, unsubscribe, or to change your mail settings: >> http://lists.phxlinux.org/mailman/listinfo/plug-discuss >> > > > --------------------------------------------------- > PLUG-discuss mailing list - [email protected] > To subscribe, unsubscribe, or to change your mail settings: > http://lists.phxlinux.org/mailman/listinfo/plug-discuss > -- Todd Millecam
--------------------------------------------------- PLUG-discuss mailing list - [email protected] To subscribe, unsubscribe, or to change your mail settings: http://lists.phxlinux.org/mailman/listinfo/plug-discuss
