Hello:
I have a virtual web hosting setup in which the web server mounts the "web 
page" folders (html/cgi-bin) folders via NFS. Each virtual host has its own set 
of linux users / group, but the file permissions of the html / scripts are 
world readable / world executable as Apache is running non root. Is there a way 
to ensure file system security such as virtual host users cannot execute/view 
other virtual hosts files? Example: accounting people cannot view files created 
by engineering.
The following are the constraints that cannot be changed by me:* Web server 
running under RedHat using Apache* web page folders are on an NFS drive
Can security be implemented using ACL (over NFS)? This is uncharted waters for 
me. We are planning to use Apache MPM ITK (http://mpm-itk.sesse.net/). Are 
there other alternatives (preferably without the need to install 3rd party 
software).
Thanks in advance,Ludwig 
_________________________________________________
Philippine Linux Users' Group (PLUG) Mailing List
http://lists.linux.org.ph/mailman/listinfo/plug
Searchable Archives: http://archives.free.net.ph

Reply via email to