On Mon, Mar 21, 2016 at 1:31 PM, Roparzh Hemon <[email protected]> wrote:
>
> Contents of /private/etc/apache2/httpd.conf file :
[]
>
> User myusernamehere
> Group staff

It's usually not a good idea to have the HTTP server own (and be able
to write to) the files/directory it serves.

So you should probably make httpd run as its own User/Group, and make
the DocumentRoot (and below) owned by an administrative user (the one
able to update the content), giving only access/read rigths to the
httpd group (or user, usually as "others").

Regards,
Yann.

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to