From a83e1fa60374fc899d2221344edf87c4b7698406 Mon Sep 17 00:00:00 2001 From: root Date: Sun, 29 Mar 2009 23:40:00 +0200 Subject: [PATCH] addsite: Give webmasters and www-data access to the data dir. --- usr/local/bin/addsite | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/usr/local/bin/addsite b/usr/local/bin/addsite index 73eb5d3..6c0749a 100755 --- a/usr/local/bin/addsite +++ b/usr/local/bin/addsite @@ -94,13 +94,13 @@ sudo chown -R 0:$GROUP "$DIR" sudo setfacl -R --set d:u::rwX,d:g::rX,d:o::-,u::rwX,g::rX,o::- "$DIR" # Give the group write access to htdocs, applications, conf and data -sudo setfacl -R -m g::rwX "$DIR/htdocs" "$DIR/applications" "$DIR/conf" "$DIR/data" +sudo setfacl -R -m g::rwX,d:g::rwX "$DIR/htdocs" "$DIR/applications" "$DIR/conf" "$DIR/data" # Give lighttpd read access to the dir itself sudo setfacl -m u:$HTTPD_USER:rx "$DIR" -# Allow lighttpd to read anything in htdocs, applications and conf -sudo setfacl -R -m d:u:$HTTPD_USER:rX,u:$HTTPD_USER:rX "$DIR/htdocs" "$DIR/applications" "$DIR/conf" +# Allow lighttpd to read anything in htdocs, applications, conf and data +sudo setfacl -R -m d:u:$HTTPD_USER:rX,u:$HTTPD_USER:rX "$DIR/htdocs" "$DIR/applications" "$DIR/conf" "$DIR/data" # Allow lighttpd to write new files in logs (but not touch existing or those created by lighttpd) sudo setfacl -m u:$HTTPD_USER:rwX "$DIR/logs" -- 2.30.2