[RESOLVED] 0755 issue

Discussion in 'General' started by MikeDVB, Mar 25, 2010.

  1. MikeDVB

    MikeDVB Well-Known Member

    I have a client that has an /images folder that is set to 0755, they wanted to set the folder and images to 0644 but when they do that all of the images show "File Not Found" by LiteSpeed.

    I don't remember having to set permission to execute image files before they can be read... I would think read would be sufficient.

    Is there any reason why these files require execute permission to be viewed by LiteSpeed WebServer?
  2. NiteWave

    NiteWave Administrator

    In my memory(not search it at the moment), execution bit for folder determine user can enter the folder or not. so for 755, all users(owner,group and other user) are permitted to enter the folder, while 644 means no user including owner can't enter the folder. only root can enter the folder.
  3. MikeDVB

    MikeDVB Well-Known Member

    I've set 0644 previously on folders and the web server was still able to access them but that was Apache.

    This folder is part of a zen-cart install that (is up to date) but seems to keep being exploited where the images folder has perl scripts uploaded that are being executed. It's no big deal for them to be uploaded if they can't be executed but trying to prevent this has lead to this issue.

    I guess I'll look at some mod_sec rules for ZenCart and see what I can find, but of course I will still watch this thread.
  4. NiteWave

    NiteWave Administrator

    Sorry, looks like I didn't read carefully your original question.
    then how about set folder /images as 0755 and files under /images as 0644? that should work. otherwise looks like an issue.
  5. MikeDVB

    MikeDVB Well-Known Member

    Even if I set the folder as 0644 it should *still* be able to access all files contained within.

    If I set the folder to 0755 and the images inside to 0644 LiteSpeed returns "File Not Found" for every image.
    Last edited: Mar 27, 2010
  6. mistwang

    mistwang LiteSpeed Staff

    directory with 0755 and file with 0644 permission is world readable. I think the problem might be the permission mask of parent directory.
  7. MikeDVB

    MikeDVB Well-Known Member

    I checked and made sure that the permissions and ownerships were all correct all the way up to /

    I'll do some more testing and update the thread.

    I'm not sure if maybe it was a bug in an older version of LiteSpeed but I just ran the 4.0.13 install on the server and rebuilt PHP and that seems to have cleared it up... really not sure.
    Last edited: Mar 27, 2010

Share This Page