Mikaela
/
shell-things
mirror of https://gitea.blesmrt.net/mikaela/shell-things.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

chmod: add adding apache/lighttpd to acl of ~/public_html

This commit is contained in:
Mika Suomalainen 2013-02-07 18:13:45 +02:00
parent 599d45e188
commit 4790af40d3
1 changed files with 35 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

39
chmod
View File

@ -5,34 +5,65 @@
## THIS SCRIPT HAS MOVED TO SHELL-THINGS AS "chmod"! ## THIS SCRIPT HAS MOVED TO SHELL-THINGS AS "chmod"!
## https://raw.github.com/Mkaysi/shell-things/master/chmod ## https://raw.github.com/Mkaysi/shell-things/master/chmod
GROUP=`id -gn`
if [ -f /etc/httpd/conf/httpd.conf ]; then
wwwdata=`grep ^User /etc/httpd/conf/httpd.conf|cut -f 2 --delimiter=" "`
fi
if [ -f /etc/apache2/apache2.conf ]; then
wwwdata=`grep ^User /etc/apache2/apache2.conf|cut -f 2 --delimiter=" "`
fi
if [ -f /etc/lighttpd/lighttpd.conf ]; then
wwwdata=`grep server.user /etc/lighttpd/lighttpd.conf|cut -f 2 -d=`
fi
echo "Denying Reading, Writing and eXecuting from other users in" echo "Denying Reading, Writing and eXecuting from other users in"
echo "your home directory $HOME ." echo "your home directory $HOME ."
echo ""
chmod g-rwx,o-rwx $HOME -R chmod g-rwx,o-rwx $HOME -R
echo "Creating empty oidentd user configuration file, if it doesn't" echo "Creating empty oidentd user configuration file, if it doesn't"
echo "already exist." echo "already exist."
echo ""
touch ~/.oidentd.conf touch ~/.oidentd.conf
echo "Allowing other users to read oidentd configuration file." echo "Allowing other users to read oidentd configuration file."
chmod u+rw,g-wx+r,o-wx+r ~/.oidentd.conf chmod u+rw,g-wx+r,o-wx+r ~/.oidentd.conf
echo ""
echo "Denying directory listing from other users and allowing them to" echo "Denying directory listing from other users and allowing them to"
echo "access files/folders where they have permissions." echo "access files/folders where they have permissions."
touch ~/.ICEauthority touch ~/.ICEauthority
chmod o-rw+x,g-rw+x ~ chmod o-rw+x,g-rw+x ~
echo ""
echo "Creating apache2 UserDir..." echo "Creating apache2 UserDir..."
mkdir -p ~/public_html/ mkdir -p ~/public_html/
echo ""
echo "Allowing everyone to Read and eXecute everything in your apache2" echo "Allowing everyone to Read and eXecute everything in your apache2"
echo "userdir". echo "userdir and hoping that we are the only user in group $GROUP..."
chmod o+rx-w,g+rx-w ~/public_html/ -R chmod o+rx-w,g+rxw ~/public_html/ -R
echo ""
echo "Setting corret permissions to other files which others should access." echo "Setting corret permissions to other files which others should access."
touch ~/.face touch ~/.face
touch ~/.forward touch ~/.forward
echo ""
chmod a+r-wx,u+rw ~/.face chmod a+r-wx,u+rw ~/.face
chmod a+r-wx,u+rw ~/.forward chmod a+r-wx,u+rw ~/.forward
echo "Setting access lists. This requires package acl to be installed"
echo "and kernel support for it and mount point being mounted with option"
echo "acl"
echo ""
setfacl -R -m u:$wwwdata:rwx ~/public_html
setfacl -R -m d:u:$wwwdata:rwx ~/public_html
if [ -f chmod.2 ]; then
./chmod.2
fi
echo "Everything is now done :)" echo "Everything is now done :)"