Apache groups and virtual hosts

clb · 11-19-2005, 11:29 AM

Hi all,
just noted in the apache config files that it states something to the effect of 'the values in the section may be overridden by directives in a VirtualHost container', then it has the username and group apache should be run as.

Got me thinking, does that mean that you can modify the user and group that Apache runs as, per VirtualHost? If you can would mean that you would be able to block users home directories from other users, something that has been troubling me for a while lol.

Thanks,
Chris

trickykid · 11-20-2005, 08:36 AM

I've never tried setting apache to run as a different user but see this as a potential hazard. You should never run it as a user and group that has login access to the machine, using accountsl like nobody that has no password is best.

If you have users that don't want anyone else to view their sites or parts of their sites, take advantage of .htaccess