Apache / PHP File Upload Permissions

[gcraiga]

Hi everyone,

I have been trying to set up the opensource PHP file repository “OWL” on a Mac OS X Tiger server for the past few days and I have been running into configuration issues with it (http://owl.sourceforge.net) The repository has an interesting feature where it will “look” at the hard drive directory for changes and add or remove files from the database if they are missing from the HD. I have set the base folder up as an AFP share and the goal is to make it so users can manipulate the repository through OWL and AFP.

That being said, I have two issues related to permissions that have come up:

1. Every file that I upload via OWL through the webserver has permissions 600 (-rw——) so files are only readable and writable by the user “www” and group “wheel”. I need to make files written by the webserver part of a common group rather than “wheel”. When I change the httpd.conf file, the process user will change but I cannot change the group – the system seems to ignore that line in the config file. I’ve also tried setting the sticky bit but the webserver seems to ignore that setting all together. Any ideas on how I can make apache run in a differnet group?

2. Once I get the group running properly, I need to make files uploaded via apache group writable with permissions 660 (-rw-rw—). I am using the “inherit permissions from parent” feature of the AFP server that solves this problem for users, but obviously this doesn’t help the web server. I have been told that UMASK will solve this problem, but that you can’t change the UMASK for Apache. Is this true or does anyone have any ideas?

Thanks

[Author]

Posts