Re: Changeroot for PHP?
On Tue, 22 Mar 2005 15:02:04 +0100
Norbert <firstname.lastname@example.org> wrote:
> Hi folks!
> Although this is not really Debian-specific apart from
> the fact that we run all servers with Debian:
> Does anyone know a way to have PHP scripts run
> changerooted one namebased virtual servers (Apache)?
> More specific: We have set up several domains with
> indiviual Apache virtual, namedbased configurations
> using the "User/Group" directives. The physical
> directory structure is something like
> For security and other reasons we would like to have
> PHP scripts changerooted to /var/www/domain1/htdocs/.
> We know this can be done using PHP-cgi and a sandbox
> but that introduces quite some performance penalties
> so we would prefer mod_php.
You might be interested in the open_basedir feature of php. (Note
that it does not require safe_mode, but can be used as part of
safe_mode.) You can read more about it at the following url: