[TYPO3-linux] mkdir (...) Permission denied

Franz Holzinger franz at fholzinger.com
Thu May 10 07:32:11 CEST 2007


Hello Michael,

> Of course:
> $TYPO3_CONF_VARS['BE']['fileCreateMask'] = '0666';
> $TYPO3_CONF_VARS['BE']['folderCreateMask'] = '0777';
> 
> But irregarding of this, setting files globally writable is always a bad
> choice.

Thanks to this solution for files created by TYPO3. But there will still
be a problem if the user uses FTP to transfer his files to the server
and safe_mode has been turned on. In this case IMHO a cron job must be
started to change the user or group back to the apache's user/group.
This is especially necessary if someone uses the DAM extension. Because
DAM replaces the normal File module and the text files under the
fileadmin folder cannot be edited any more. Therefore the user must use
the SSH/SFTP/FTP and his operating system's editor instead.

There will be no problem with setting all files to writable. You (the
admin) can restrict the rights to the apache document root.
E.g.
drwxr-x--- 25 franz www  1024 Apr 20 21:28 public_html
jambage:/home/jambage.com #

No other users on the server could enter his apache root then. Therefore
no others can write or read even if the files inside would have had
write or read permissions.

useruser at jambage:~> ls -l
/home/jambage.com/public_html/typo3subdomain/typo3conf
/bin/ls: /home/jambage.com/public_html/typo3subdomain/typo3conf: Keine
Berechtigung

The only one to write/read them would be the owner of the apache root
folder. SSH should be used. Maybe FTP would not work with this folder
restrictions.

other possibility found due to your answer:
$TYPO3_CONF_VARS['BE']['createGroup'] = ftpusergroup
And the apache must be a member of all ftp user groups, which normally
are all the same. Drawback: Other ftp users on the server could delete
your files. However the FTP program must avoid this and allow only
personal folders to each FTP user.

- Franz
















More information about the TYPO3-linux mailing list