Re: php: /var/www/html & file owner

["Ward Vandewege" <user=150@nabble.blu.org>]

 On Wed, Nov 14, 2007 at 07:46:28AM -0500, eric c wrote: 
> Hi all.  I'm moving from a shared web host to rolling my own.  Getting 
> everything running was so easy I'm nervous!  In particular I would like to 
> make sure PHP / httpd stay within /var/www/html.  Am I running an 
> additional risk by having the owner of the files within that directory 
> being a user other than root?  The intersection of php / httpd / selinux 
> permissions are currently unclear, any suggested reading?  Many thanks! - 

Just one little word of advice; assuming you're using appache, disable 
mod_userdir if you don't use it. It's often on by default. 

Also make /tmp a separate partition and mount it noexec. 

Thanks, 
Ward. 

-- 
Pong.be         -(     "The Linux philosophy is 'Laugh in the face of      )- 
Virtual hosting -(    danger'. Oops. Wrong One. 'Do it yourself'. Yes,     )- 
http://pong.be  -(                  that's it." -- Linus                   )- 
GnuPG public key: http://pgp.mit.edu

-- 
This message has been scanned for viruses and 
dangerous content by MailScanner, and is 
believed to be clean. 

_______________________________________________ 
Discuss mailing list 
[hidden email] 
http://lists.blu.org/mailman/listinfo/discuss