On Mon, Jan 03, 2011 at 12:05:35AM +0100, Grzegorz Dwornicki wrote:
> Hi
> 
> Let's say i want to create a configuration of apache2 + suphp with
> will allow users to set right for their files and directories to owner
> only. Soo php needs to be run as owner (this takes suphp). But in
> order to apache even run suphp it needs to go to documentroot and look
> at index file or other file that user had requested. To to tjis apache
> needs to be able to go to that directory ignoring file rights - maybe
> apache run as root?
> 
> I wanted to chect this configuration but it seems that apache as root
> and suphp creates errors like this:
> 
> ...
>
> Best Regards
> Grzegory
> 

Of course, you could set the directory to be owned by username:www-data (or 
whatever group your apache uses), and set perms to 0750. This would, in my 
opinion, achieve the same security?

Aki Tuomi

Attachment: signature.asc
Description: Digital signature

_______________________________________________
suPHP mailing list
[email protected]
https://lists.marsching.com/mailman/listinfo/suphp

Reply via email to