chmod 0775 directories error

hifromjarrod

So I finished installing flarum but when i goto set it up. I get:

The /var/www/html/forums directory is not writable.
The /var/www/html/forums/assets directory is not writable.
The /var/www/html/forums/storage directory is not writable.

Even when I chmod 0775 the three directories then restart apache2 it still wont get rid of the errors.

What should I do?

luceos

hifromjarrod the files are owned by another user, it should be the webserver user. Without more information on your set up it's very hard to give pointers how to solve this.

FebriTriHarmoko

hifromjarrod this case same with me (https://discuss.flarum.org/d/6854-how-to-install-flarum-in-vultr)
now you can try to run command like 0E800 say ?

0E800

Did you use sudo?
Maybe:

sudo chown www-data:www-data -R /var/www/

Review:
https://discuss.flarum.org/d/1856-directory-permissions-not-writable/6

XxPoNaGeXx

0E800 Awesome this worked for me!

webeindustry

Try this:

ps -ef | egrep '(httpd|apache2|apache|nginx)' | grep -v root | head -n1 | awk '{print $1}'

You should see an output {user}

take the {user} and do:

chown /var/www/html/forums {user}:
chown /var/www/html/forums/assets {user}: -R
chown /var/www/html/forums/storage {user}: -R

@0E800 We don't want all files and folders to be accessible by world. The remaining should be owned by another user.

0E800

webeindustry
My mistake. That worked for me but after reading your post I am thinking I have opened myself up.

Thank you for the correction.

0E800

webeindustry

ps -ef | egrep '(httpd|apache2|apache|nginx)' | grep -v root | head -n1 | awk '{print $1}'

Outputs:
www-data

So am I safe to continue to use:
sudo chown www-data:www-data -R /var/www/

webeindustry

0E800

Not -R. That is recursive for all files and directories within it's contents.

You want the directory itself to be executable, not all contents within.

Everything that is not in storage, assets, or your web-root you want owned by root (or another user not the webserver). Because they are owned by someone else, they will get lower-privileges which is what we want.

0E800

webeindustry
Wouldnt -R include fonts and other assets that I might have used another account to copy with to make them view able on the flarum site?

webeindustry

0E800

Yes, please see my first post. I include these.

0E800

webeindustry
On the server instance I am using the folder path and the user are in reverse order.

chown www-data /var/www/35.167.169.85/
chown www-data /var/www/35.167.169.85/assets/ -R
chown www-data /var/www/35.167.169.85/storage/ -R

Worked for me.
Because of the other command I used which opened up everything to web, is there a way I can verify any sensitive files are still accessible?

I tried to access config.php but got a blank page. I tried wget config.php and only got a 0 byte blank file. I think im good?

Thank you again for your expertise.

webeindustry

0E800

I follow the principal of least-required privileges. config.php needs be read only, so that would be a 4, and only by it's owner. chmod 400 config.php would be a good practice.

Notice also, in my script there is a chgrp command. I prefer to keep the owner and group privileges separated, otherwise there is less gradation we can achieve in the privileges. We're essentially taking a two layer approach in what is meant to be 3 layers: owner, group, world.

0E800

FebriTriHarmoko

Think you mean what @Ralkage @datitisev said?

I am absent from the post you linked, so cannot accept the credit. ☺

Ralkage

0E800 He means posts 12, the one you replied with a workaround of how you got your set up working in this discussion a little up from here.

0E800

@Ralkage

Ahhh, now I see. Thank you for clearing that up for me, my mistake.

KarthikVemuri

opened full permissions. still no luck for me ?

[root@flarum html]# chmod -R 777 /var/www/
[root@flarum html]# chown -R apache:apache /var/www/
[root@flarum html]#
[root@flarum html]#
[root@flarum html]# cd /var/www/html/
[root@flarum html]# ls -la
total 228
drwxrwxrwx. 6 apache apache 4096 Oct 27 12:41 .
drwxrwxrwx. 4 apache apache 33 Oct 27 12:35 ..
-rwxrwxrwx. 1 apache apache 319 Oct 27 12:41 admin.php
-rwxrwxrwx. 1 apache apache 317 Oct 27 12:41 api.php
drwxrwxrwx. 3 apache apache 21 Oct 27 12:41 assets
-rwxrwxrwx. 1 apache apache 1708 Oct 27 12:41 composer.json
-rwxrwxrwx. 1 apache apache 162009 Oct 27 12:41 composer.lock
-rwxrwxrwx. 1 apache apache 4958 Oct 27 12:41 CONTRIBUTING.md
-rwxrwxrwx. 1 apache apache 354 Oct 27 12:41 .editorconfig
-rwxrwxrwx. 1 apache apache 381 Oct 27 12:41 flarum
-rwxrwxrwx. 1 apache apache 3820 Oct 27 12:41 .htaccess
-rwxrwxrwx. 1 apache apache 319 Oct 27 12:41 index.php
-rwxrwxrwx. 1 apache apache 1083 Oct 27 12:41 LICENSE
-rwxrwxrwx. 1 apache apache 104 Oct 27 12:41 Procfile
-rwxrwxrwx. 1 apache apache 1480 Oct 27 12:41 readme.md
drwxrwxrwx. 2 apache apache 43 Oct 27 12:41 scripts
drwxrwxrwx. 8 apache apache 84 Oct 27 12:41 storage
-rwxrwxrwx. 1 apache apache 11320 Oct 27 12:41 Vagrantfile
drwxrwxrwx. 31 apache apache 4096 Oct 27 12:41 vendor