Quote:
Originally Posted by eschwartz
Why would you not want to use chmod 777??? What exactly are you warning against?
|
Is this a trick question?
There are many reasons one should not use 777, which is equivalent to giving every user and the web server all access to those files. If there is a hole in some web server application then all those 777 files are exposed. If someone manages to hijack an account then all those 777 files are exposed. I am sure that any machine/VPS you manage are like mine, being probed hundreds, sometimes thousands, of times per day by bots doing dictionary attacks and probing web-visible vulnerabilities. Why make it easier for them?
As a side note, many versions of tar will by default restore uid/gids from the archive if run as root. This could account for the strange numbers being seen.