Correct user settings

[mkaening]

Hi,

 

I installed osc and ask myself whether it's the right way to go if I do this:

 

chmod -R www-data:www-data /srv/www/htdocs/osc

 

Only the one file I left for root:

 

chown root:www-data /srv/www/htdocs/osc/catalog/includes/configure.php

 

(This was necessary since my server operates php in safe_mode. Without this tweak osc would not properly create links in the pub directory.)

 

So Apache has full access control to the files. It's probably safer to restrict the www-data-usership only to the pub directory?

 

What do you guys suggest?

 

Greets,

Marko