Linux File permissions for other user as root to read and execute

Question

I have a folder /home/zain/uploads/hash/

In uploads one of my service which is running with forever-service is creating hash folder and put file inside it ..

problem is, it is creating hash folder and file inside it as root user and 700 access since it is running with forever-service ..

But when I tried to access through my nginx so it give me 403 forbidden ..

my nginx user is opc ..

If I change owner or group manually then I can access to that file.. so I don't want to change permissions manually every time.

How can I solve the problem?

How do you execute the forever-service? you should change the service user-id to be opc... or update it, to change the output files to be owned by opc — Yaron
– Yaron, Commented Aug 7, 2018 at 10:33
@Yaron forever-service must be run as root it give me this error when i tried to run with opc — Zain Abbas
– Zain Abbas, Commented Aug 7, 2018 at 10:37
Can you update the service runs by forever-service to execute chown opc -R /home/zain/uploads/hash and/or chmod 755 -R /home/zain/uploads/hash as its last steps? — Yaron
– Yaron, Commented Aug 7, 2018 at 10:42
@Yaron nopes i cant edit that script .. and also have a similar thought of creating cronJob which checks new entry of file and changes its permission ... but thats doesnt seems a right way.. — Zain Abbas
– Zain Abbas, Commented Aug 7, 2018 at 10:50

ctrl-alt-delor · Accepted Answer · 2018-08-07 11:55:19Z

0

I can see two options,

Run the service as a different user, but use capabilities. root has been broken up in to many capabilities, if the service is written well (does not, un-necessarily, try to do security, but lets kernel do it), then it should work with capabilities.
Use file access control lists, with defaults, so that the other user is added with read (maybe write) permissions.

answered Aug 7, 2018 at 11:55

ctrl-alt-delor

28.8k11 gold badges66 silver badges113 bronze badges

RalfFriedl · Accepted Answer · 2018-08-07 17:30:44Z

0

It may be sufficient to change the umask of the process creating the files.

answered Aug 7, 2018 at 17:30

RalfFriedl

9,2396 gold badges26 silver badges34 bronze badges

2 Answers 2