Re: virtual host
> Im not sure what you mean. If you mean you are running an apache
> virtualhost in a box for another person, and if is secure to permit
> read to those logs to the owner of the virtual host (who, and im
> guessing, happen to have some user in that box) then yes. Im no expert
> but the only problem i could see is a information disclosure security
> problem... but since is its own virtualhost... no problem
Hi and thanks for your reply :-)
I mean users owner of own virtual host can see own logs.
But if there're any security problem by log I prefer deny access to
error.log (and permit only access.log [also for purpose statitics])
now it's clear.
thanks again
Pol
Reply to: