GIDForums  

Go Back   GIDForums > Web Hosting Forums > Apache Web Server Forum
User Name
Password
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

 
 
Thread Tools Search this Thread Rate Thread
  #1  
Old 14-Jan-2004, 12:32
garymayor garymayor is offline
New Member
 
Join Date: Jan 2004
Posts: 3
garymayor is on a distinguished road

Security Question Help Please?


Hi,
I've setup apache 2.0.40 to run as a user(gary) and group(apache) but it can read all user directories in /home/. So say
/home/user1
/home/user2
/home/user3
They can all read each other because the user directories have to be chmod 770 to enable apache to read the files in the directory. I want to stop this because if I run a perl script that reads the directories in /home/ then things are not secure and i'll be adding some users in the next couple of days and I want to stop them from possibly reading other each others directories.

How do I do this anyone.

Thanks

Gary Mayor
  #2  
Old 14-Jan-2004, 13:02
Allowee's Avatar
Allowee Allowee is offline
Regular Member
 
Join Date: May 2003
Location: The Netherlands
Posts: 339
Allowee has a spectacular aura about
you can chmod /home and /home/user* to make them not viewable by users..
then you can create a public_html directory to put the files in.

but when apache can read the directory, everybode can

securing /home already makes things harder for users to find other users home dir
__________________
Pastebin
PHP Documentation Site
Allowee's Blog http://allowee.net
  #3  
Old 14-Jan-2004, 13:15
garymayor garymayor is offline
New Member
 
Join Date: Jan 2004
Posts: 3
garymayor is on a distinguished road
I see your point it is much better than what i've got at the moment shall be implementing it immediately.

Cheers
 

Recent GIDBlogFirst week of IA training by crystalattice

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Rate This Thread
Rate This Thread:

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
A question about the Amazon Affiliate Program JdS Advertising & Affiliates Forum 5 13-Jan-2004 17:00
a C input question.. tmike C Programming Language 2 19-Sep-2003 02:39
a C input question tmike C Programming Language 1 16-Sep-2003 02:31
a noobish compiler question Charunks CPP / C++ Forum 5 03-Sep-2003 02:18
Mozilla TARGET question nickbeee Web Design Forum 2 03-Aug-2002 03:57

Network Sites: GIDNetwork · GIDWebHosts · GIDSearch · Learning Journal by J de Silva, The

All times are GMT -6. The time now is 15:41.


vBulletin, Copyright © 2000 - 2008, Jelsoft Enterprises Ltd.