Links

Lists

Latest Updates

Ruby On Rails List
Python list
Advanced Java
The JavaScript List
Apache Users
Full Disclosure
Linux Security

Search the archives!


[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: [users@httpd] httpd user and user directory permissions dilemna


  • From: "Roger Lipscombe" <roger@xxxxxxxxxxxxxxxx>
  • Subject: RE: [users@httpd] httpd user and user directory permissions dilemna
  • Date: Sun, 2 Nov 2003 22:02:46 -0000

users@xxxxxxxxxxxxxxxx & users@xxxxxxxxxxxxxxxx:
> 
> 2.  User home directories should not allow group or world access.

Why not?  Logically speaking, if Apache to serves them over HTTP, they're
already available to the world.  Unless, of course, you implement
authentication to ensure that each user can only access his own web pages.

There's a reason it's called *public*_html.

Cheers,
Roger.


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
   "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx