LinuxQuestions.org
Visit Jeremy's Blog.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices

Reply
 
Search this Thread
Old 03-14-2004, 09:00 PM   #1
guideweb
Member
 
Registered: Mar 2004
Location: /planet/earth
Posts: 110

Rep: Reputation: 15
Apache : execute pages as different user


Hi,



Users can access ther files with secure shell (/home/bob) and update the files with VSFTP.

I setup the UserDir(/home/*/public_html) in apache to give the premision to my users to host web sites.

How do i have to setup files premisions to prevent security risks and to permit apache to read/write in the user directory ?

Last edited by guideweb; 03-15-2004 at 06:28 AM.
 
Old 03-15-2004, 04:41 PM   #2
unSpawn
Moderator
 
Registered: May 2001
Posts: 27,451
Blog Entries: 54

Rep: Reputation: 2893Reputation: 2893Reputation: 2893Reputation: 2893Reputation: 2893Reputation: 2893Reputation: 2893Reputation: 2893Reputation: 2893Reputation: 2893Reputation: 2893
Start by not giving them rights to run CGI from their UserDir?
 
Old 03-15-2004, 06:41 PM   #3
guideweb
Member
 
Registered: Mar 2004
Location: /planet/earth
Posts: 110

Original Poster
Rep: Reputation: 15
The big problem is that
*user1 can see the files of user2 when he login into SSH of other shell.
*When apache create files on the user directory, apache set the owner and group to apache user and group and after the user cant delete these files
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
How to execute iptables command by the user apache ??? Bassam Linux - Security 2 10-28-2005 07:10 AM
Cant Get Apache to execute php pages nevarlen Linux - Newbie 1 02-17-2005 11:48 PM
execute a script as a different user JordanH Linux - Software 3 02-08-2005 02:47 PM
Execute a command as another user mpgram Linux - Newbie 6 06-08-2004 11:45 PM
execute command as different user kilobravo Linux - General 2 06-02-2003 10:03 AM


All times are GMT -5. The time now is 03:51 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration