Apache : execute pages as different user

guideweb · 03-14-2004, 09:00 PM

Hi,

Users can access ther files with secure shell (/home/bob) and update the files with VSFTP.

I setup the UserDir(/home/*/public_html) in apache to give the premision to my users to host web sites.

How do i have to setup files premisions to prevent security risks and to permit apache to read/write in the user directory ?

unSpawn · 03-15-2004, 04:41 PM

Start by not giving them rights to run CGI from their UserDir?

guideweb · 03-15-2004, 06:41 PM

The big problem is that
*user1 can see the files of user2 when he login into SSH of other shell.
*When apache create files on the user directory, apache set the owner and group to apache user and group and after the user cant delete these files