Index: [Article Count Order] [Thread]

Date:  Thu, 31 Jul 2008 14:39:41 +0200
From:  "thomas" <tfj-online (at mark) mail.tele.dk>
Subject:  [coba-e:13656] Re: apache suexec
To:  <coba-e (at mark) bluequartz.org>
Message-Id:  <0d1e01c8f30a$80a2baf0$967da8c0@thomasferrari>
References:  <819609.69984.qm (at mark) web65614.mail.ac4.yahoo.com>
X-Mail-Count: 13656

I'm not trying to add a user.

I'm trying to make apache httpd run as the siteadmin of the individual sites 
on the server, which should make new files created from webpages owned by 
the siteadmin and not apache:apache

I'm not sure how to go about this ! I think it involves using the suexec 
module build into apache.

By not using suexec og some other security mechanism I think that 
apache:apache is able to write across sites /home/sites/*/web/ !!!

So I am looking for at way to implement some security and also getting the 
uploads files / created files from http to be owned by the siteadmin. That 
way he can overwrite the files from ftp, He can't do that with files created 
by apache:apache, unless they have chmod 777, which is very insecure.


--
Thomas Jensen

----- Original Message ----- 
From: "Dan Kriwitsky" <webhosting (at mark) yahoo.com>
To: <coba-e (at mark) bluequartz.org>
Sent: Thursday, July 31, 2008 1:26 PM
Subject: [coba-e:13652] Re: apache suexec


>
>>
>> Have you change anything in your config files "Dan
>> Kriwitsky" ?
>>
>>
>
> I'm not sure what you're trying to do there. I just added a user as normal 
> via the GUI.
>
> -- 
> Dan Kriwitsky
>
>
>
>
>
>