Re: [CentOS] Best way to secure apache web root

2009-11-29 Thread Geerd-Dietger Hoffmann
Hey On Fri, Nov 27, 2009 at 10:46 AM, Stephen Nelson-Smith wrote: > I have a site running drupal.  The apache user therefore needs to be > able to write certain files (CSS files for example). > > I also have a directory under my web root which is a SAN mount, to > which apache must be able to wri

Re: [CentOS] Best way to secure apache web root

2009-11-27 Thread Peter Peltonen
Hi, On Fri, Nov 27, 2009 at 12:46 PM, Stephen Nelson-Smith wrote: > I have a site running drupal.  The apache user therefore needs to be > able to write certain files (CSS files for example). > > I also have a directory under my web root which is a SAN mount, to > which apache must be able to wri

Re: [CentOS] Best way to secure apache web root

2009-11-27 Thread Stephen Nelson-Smith
Hi, >> What is the most secure way to implement this? >> >> I am thinking: >> >> chown -R root:apache /var/www/html >> chmod -R 0750 /var/www/html >> chown apache:apache for where need to write > > Yes, use acl and selinux. Could you expand? Have you an example you could point me at? I'm happy

Re: [CentOS] Best way to secure apache web root

2009-11-27 Thread Eero Volotinen
Stephen Nelson-Smith wrote: > I have a site running drupal. The apache user therefore needs to be > able to write certain files (CSS files for example). > > I also have a directory under my web root which is a SAN mount, to > which apache must be able to write. > > What is the most secure way to

[CentOS] Best way to secure apache web root

2009-11-27 Thread Stephen Nelson-Smith
I have a site running drupal. The apache user therefore needs to be able to write certain files (CSS files for example). I also have a directory under my web root which is a SAN mount, to which apache must be able to write. What is the most secure way to implement this? I am thinking: chown -R