Michael,
NOTE: http://www.apache.org/docs/mod/directives.html
is a great resource for doco on all the Apache directives.
On Thu, 4 May 2000, Michael Lake wrote:
> I have Apache running and can see pages in /home/httpd/html
> At present it all works if I copy all the HTML files into the above
> directory and all the cgi ones into the default /home/httpd/cgi-bin
> directory. But I really would prefer to develop the app in my own
> directory ~/mikel/src/UTS/monte-carlo/
> Making a symlink to there dooes not work because of permissions probs.
> 1. Should I change a conf file and make mikel/src../monte-carlo
> allowable as a directory from which to run cgi's?
If you own the web server, sure.
Config that directory as you would /cgi-bin
> 2. Should I somehow symlink from /home/httpd/html to there and change
> permission so it can run?
Easier: Alias /monte-carlo /home/mikel/src/UTS/whatever
(that's for your HTML docs, not the cgi ;)
The web address is then: http://whatever.uts.edu.au/monte-carlo
> 3. Should I put them in a /mikel/public_html directory?
Could do. Then you need to config UserDir as public_html
> Should the files in these directories be owned by root or by users
> security wise?
The files and directories should *not* be owned
by the username the web server runs as (which
is probably nobody or httpd).
Best to make the files and directories readable
to the world,
mode 644 for files
mode 751 or 755 for directories
> I presume if they are owned by users Aapche will still run them as root
> which might be dangerous.
Apache httpd should *not* run as root.
User httpd
Group httpd
are suggested for the config.
> If owned by users does that means that they are more accessable by
> outsiders to tamper with?
The files *you* are working should be owned
by *you*.
> What should the permissions be:
> The Apache index.html is set as -rw-r--r--
Should be fine.
Hope this helps,
Rgds
Rickw
--
Rick Welykochy || Praxis Services
--
SLUG - Sydney Linux Users Group Mailing List - http://www.slug.org.au
To unsubscribe send email to [EMAIL PROTECTED] with
unsubscribe in the text
