Re: Apache and public_html directories

[Paul Miller <pmiller@jove.acs.unt.edu>]

Jonathan Guthrie wrote:
> 
> Is the file /home/mark/public_html readable by the user or group that
> Apache runs as?  I set the home directories of my users up to have
> permissions of 710 and membership in the group that Apache runs as
> ("wheel" on my main computer, "www-data" on every Debian installation I've
> ever seen) and the public_html directory has permissions of 775.
> 
> This means that Apache can get into everybody's public_html directory, but
> no users can.

This does not have to be set up this way. The permission on the users
home directory should be a minimum of 701. The public_html directory the
same. The files within the public_html directory need to be a minimum of
604. 

I personally do not feel comfortable giving users membership in the
wheel group as I have always believed it to be researved for those
granted some super-user rights. With the above file permissions, you can
leave home directories and such at the default group, or whatever
grouping scheme you wish to use.

-- 
Paul Miller
pmiller@jove.acs.unt.edu