WebDAV directory created with r-x permission to world

isolmrg shared this idea ago

Open Discussion

As a cPanel user, I want the WebDAV directory created with r-x permission to world, so that unauthorized users do not have the ability to access the WebDav directory.

This is no problem when in public_html, but if an user create it in /home/user/davtest

drwxr-xr-w /home/user/davtest

The Userdir has

drwx--x--x /home/user/

so all other user can access an read davtest. the users must quess the name, but it is possible.

it is possible to change the permissions to drwxr-x--- when cpanel create the webdav dir?

thanks

I like this idea 0

Replies (1)

isolmrg ●

to explain: its a security risk in actual cpanel !

This is no problem when in public_html, but if an user create it in /home/user/davtestdrwxr-xr-w /home/user/davtestThe Userdir hasdrwx--x--x /home/user/so all other user can access an read davtest. the users must quess the name, but it is possible.it is possible to change the permissions to drwxr-x--- when cpanel create the webdav dir?thanks

Reply URL