Skip to content
This repository

HTTPS clone URL

Subversion checkout URL

You can clone with HTTPS or Subversion.

Download ZIP
Browse code

Tighten web server access to release directories.

  • Loading branch information...
commit b875604bfbdf66ed31b369ba0cbe5e00adf76e69 1 parent e68f2fa
Hongli Lai FooBarWidget authored

Showing 1 changed file with 3 additions and 0 deletions. Show diff stats Hide diff stats

  1. +3 0  set-capistrano-permissions
3  set-capistrano-permissions
@@ -35,6 +35,9 @@ end
35 35
36 36 # Set the permissions on a /u/apps/.../releases/... directory.
37 37 def set_permissions_on_release_dir(dir)
  38 + # Deny web server access to everything except for a few things.
  39 + sh "deny #{WWW_USER} #{dir}"
  40 +
38 41 # Executable access to the directory itself
39 42 # so that the web server can access subdirectories.
40 43 sh "setfacl -m user:#{WWW_USER}:--x #{dir}"

0 comments on commit b875604

Please sign in to comment.
Something went wrong with that request. Please try again.