[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Q: Howto setup a web-hotel with apache, php and mysql



How about running Apache in its own root jail (using mod_chroot) and
setting open_basedir in httpd.conf per user:

php_admin_value open_basedir "/example.com/public_html:/usr/lib/php"

John

On Mon, Jan 24, 2005 at 10:09:10AM +0100, Emmanuel Lacour wrote:
> Date: Mon, 24 Jan 2005 10:09:10 +0100
> From: Emmanuel Lacour <elacour@easter-eggs.com>
> To: debian-isp@lists.debian.org
> Subject: Re: Q: Howto setup a web-hotel with apache, php and mysql
> 
> On Mon, Jan 24, 2005 at 09:55:20AM +0100, Jarle Aase wrote:
> > Ideally, I would want Apache to change user-id when it enters the
> > VirtualHost of a user. I don't see how this can be done, so a more
> > realistic approach may be to run php as a separate user for each virtual
> > host. I've played a little with suexec - but this thing seems a bit
> > _too_ paranoid...
> > 
> 
> I would suggests that you look at "suphp", it run php scripts under the
> owner uid/gid, witjout need for shebang, binfmt or chmod +x on the php
> files.
> 
> apt-cache search suphp
> 
> -- 
> Emmanuel Lacour ------------------------------------ Easter-eggs
> 44-46 rue de l'Ouest  -  75014 Paris   -   France -  Métro Gaité
> Phone: +33 (0) 1 43 35 00 37    -     Fax: +33 (0) 1 41 35 00 76
> mailto:elacour@easter-eggs.com   -    http://www.easter-eggs.com
> 
> 
> -- 
> To UNSUBSCRIBE, email to debian-isp-REQUEST@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
> 
> 

-- 
John Caspers
john@caspers.nl



Reply to: