Files with 777 changed to 644?

[Sergio]

Hi Chirpy,
a few days ago you included the change of 777 to 755 on directories and now it will be great if CXS could change on the fly, every time a scan is done, files like HTML, PHP, CGI, JPG, GIF or PNG to 644? Could this be done?

Sergio

[ckh]

cgi needs 755 to execute.... Might not want to change that extension.

[Sergio]

cgi needs 755 to execute.... Might not want to change that extension.

The suggestion is to get rid of any 777 on the server, right now it is done to directories and that is great, but files with 777 has to be investigated or changed the chmod on the fly.

You are right and CGI has to have 755, so, this could be a list of some files and suggested permissions:
CGI - 755
PHP - 600
HTM - 644
JPG - 644
GIF - 644
PNG - 644

This is only a suggestion, but I think it will greatly improve the security on our servers.

Sergio

[caisc]

yes it will be of great help, plz consider this option Jonathan.

[caisc]

Any update on this, Forum admins plz keep us updated what you guys are planning to do in future.

Thanks

[JulesR]

Just wanted to say we also think this would be a great feature...