Re: apache, public_html, and security

[Martin.Bialasinski@uni-koeln.de]

On 23 Jul, Paul Miller wrote:
> is there a way I can prevent users from looking at other user's dirs and
> still have the public_html function of apache (v1.2.1)?
> 
I think you can do this:

If you have:

drwxrwxr-x   6 elmar    elmar        1024 Jun 23 00:48 elmar   
(this is the homedir of user elmar)

do a chmod o-r elmar

Make sure, that the permissions on the public_html are set to o+rx :

drwxrwxr-x   2 elmar    martinb      1024 Jun 23 00:54 public_html 

The files in public_html have o+r :

-rw-r--r--   1 elmar    elmar         168 May 18 02:18 index.html

This should make any webserver happy. At least it works on Roxen.

Ciao,
	Martin 


--
TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word "unsubscribe" to
debian-user-request@lists.debian.org . 
Trouble?  e-mail to templin@bucknell.edu .