新聞財經娛樂♬資訊 News Economy

Now I would like to open my VPS site to visitor. Before doing that, I need to
set all my directories and files to be read only (including download file from visitors).
And I know if don't put any index.html or inde.php at the directories, it will
show  the directories content such as file tress on browser. How to not to read the file trees by visitor.

Is there any existing linux script doing for ALL  change the read mode with my user group for all
file and directories  and its sub-directoried under my VPS user account directory when visitors visit my site and the script  meets the requirement mentioned above ?  SO I need to take use
chgrp besides chmod command in the script.

For uploading file from visitors, do I need to set write and read for the uploading directory
in my server, how  ?

Please advise

Rwnicewing

You can chroot their sftp account. Or FTP account... as you prefer. No need to change permissions.

It's subtracting the w or write from group and other without changing the other permission bits.

It could be 755 or 744 or 711 or 700, depending on what you had before.

What do you mean exactly?  Do you want to disable directory listing?  Then you remove the read bit but leave the execute bit for the directory.  The files should still have the read bit.  Set the directory to 711 but leave the files with 744.  If you have scripts, you may need to set those files to 755.  That's why you use the g-w, o-w options to only remove the write bit.

If I'm reading correctly, I believe you just need to use the -R option to chgrp and chmod to change it for all subdirectories.

Change the group to your home folder and everything under.
chgrp -R My_Group ~

Remove write permissions from the group and other in your home folder and everything under
chmod -R g-w,o-w ~

the easiest way when you do not have a security concept is to login by ftp on your server to set the permissions and to test. you can use www2ftp.de for example.

The security concept is user group anyone means the first number is the permission for users the second for the group and the last for every one normally you should set 750. So you can still have full access the group normally the apache group has only read execute and anonymous 0

You can read how to do: http://serverfault.com/questions/357108/what-permissions-should-my-website-files-folders-have-on-a-linux-webserver