HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials

HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials (http://www.howtoforge.com/forums/index.php)
-   Installation/Configuration (http://www.howtoforge.com/forums/forumdisplay.php?f=16)
-   -   3 Problems with user rights and apache rights (http://www.howtoforge.com/forums/showthread.php?t=23536)

togme 22nd May 2008 14:18

3 Problems with user rights and apache rights
 
Hi out there,

I have the following three problems:

1. rights in /var/www/webx/web are set to world-readable
--> this means all joomla-admin-users can install joomla-Explorer and can read the configuration.php and see the db-password et.al.
2. apache runs as www-data while the domain-groups are set to webX (/var/www/web/...) --> if the instance starts as a user in group webX then the first questions is solved (I think) if and only if ispconfig sets the rights in the correct way?
3. webX-Users are often deleted and new created so that these users are also deleted in manually created unix-groups.
I have a subversion group an would like to add some users which in turn get rights to read and write to specific repositories.

I think #1 has #2 as reason --> is it possible to run apache as user for each domain instead of www-data and create the rights accordingly?

Is it possible to patch ispconfig not to delete users so that they persist in own unix-groups?

I have searched and googled a lot but don't really understand the influence of apache-configuration on ispconfig.

Is there a solution for my problems - or a workaround?

many thanx in advance for any suggestions!

Thomas

till 22nd May 2008 20:06

This is a common problem in shared hosting enviroments, one answer is to use suphp:

http://www.howtoforge.com/install-su...2.20-and-above

togme 7th June 2008 14:37

Thanx Till,

suphp will help for php. Does it also solve the world-readable problem?

how can I solve the disappearing of ispconfig-users in own unix groups?

(Sorry for the late reply, I've been ill a longer time :-( )

TIA

Thomas

till 8th June 2008 13:02

After you installed suphp, the suers will not be able anmore to "leave" their home directory with a php script.

Quote:

how can I solve the disappearing of ispconfig-users in own unix groups?
ISPConfig users can not be added to custom groups. If you want to change this behaviour, you would have to rewrite the way that ISPConfig manages the system users.


All times are GMT +2. The time now is 18:30.

Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.