Hey everyone.

I would like to use the userdir module with apache. I have it working, but I'm not sure if it's working to the best way it should.

For example, I needed to either set the users directories to 775 or add the apache group to users directory, and give apache permission to their directory as well.

Is this really the right way to do this? Usually I would think that there would be a more elegant way to do this.....

For example, whats the point of calling 'userdir disable root' if you haven't given anyone else permission to use that directory.

For every new account will I have to add permissions and groups to the user directories?

My other thought is I can give the apache group access to all folders users directories via an acl to help cut down on the admin.

Any thoughts?

Unless every user has a private group set the directory permissions to 755. Apache will have to execute the directory and parent directories of each web space which is normally done by making the 'all' bit r-x. I guess you could make the parent directory --x if you wanted.
There really shouldn't be security concerns since the data is intended to be served via the web anyway (anything in that directory is intended to be public)