Re: [CentOS] Best way to secure apache web root

2009-11-29 Thread Geerd-Dietger Hoffmann
Hey On Fri, Nov 27, 2009 at 10:46 AM, Stephen Nelson-Smith step...@atalanta-systems.com wrote: I have a site running drupal.  The apache user therefore needs to be able to write certain files (CSS files for example). I also have a directory under my web root which is a SAN mount, to which

[CentOS] Best way to secure apache web root

2009-11-27 Thread Stephen Nelson-Smith
I have a site running drupal. The apache user therefore needs to be able to write certain files (CSS files for example). I also have a directory under my web root which is a SAN mount, to which apache must be able to write. What is the most secure way to implement this? I am thinking: chown

Re: [CentOS] Best way to secure apache web root

2009-11-27 Thread Eero Volotinen
Stephen Nelson-Smith wrote: I have a site running drupal. The apache user therefore needs to be able to write certain files (CSS files for example). I also have a directory under my web root which is a SAN mount, to which apache must be able to write. What is the most secure way to

Re: [CentOS] Best way to secure apache web root

2009-11-27 Thread Stephen Nelson-Smith
Hi, What is the most secure way to implement this? I am thinking: chown -R root:apache /var/www/html chmod -R 0750 /var/www/html chown apache:apache for where need to write Yes, use acl and selinux. Could you expand? Have you an example you could point me at? I'm happy to read any

Re: [CentOS] Best way to secure apache web root

2009-11-27 Thread Peter Peltonen
Hi, On Fri, Nov 27, 2009 at 12:46 PM, Stephen Nelson-Smith step...@atalanta-systems.com wrote: I have a site running drupal.  The apache user therefore needs to be able to write certain files (CSS files for example). I also have a directory under my web root which is a SAN mount, to which