Re: virtual host

[alberto fuentes <pajaro@gmail.com>]

On Wed, Jul 3, 2013 at 8:49 PM, Pol Hallen <deben@fuckaround.org> wrote:
> I mean users owner of own virtual host can see own logs.
>
> But if there're any security problem by log I prefer deny access to
> error.log (and permit only access.log [also for purpose statitics])


How are you going to allow read access to owner of virtualhost?
does it have some user in that machine? does he have ftp access to
virtualhost documentroot?
Are you just going to send him the logs somewhere outside your server?

I guess it depends in how potentially hostile is this user towards
your server, but he will only be able to see the errors of his own
virtualhost... I dont really see a problem, but just take this as
amateur security advice  ;)

cheers