apache2-mpm-itk

[ilaidlaw]

You'd likely also want to remove world read/write permissions from the files and remove world execute permissions from directories of the all the document roots for each vhost. I have mpm_itk working in a test environment as well, seems ok so far.

[SuperQ]

I'm glad it's easy to add this feature. I use mpm-itk for about 70 virtual hosts running on my system. It has been fairly stable, and helps secure crappy php applications from each other for different users. I have been looking at various ISP packages for a while and am hoping to test out ISPconfig 3 now.

I'll probably post a bunch of questions soon. :-)

[demia]

Hi,

I have somewhat simple problem. i have x.com everyone is welcome, but when you login from a php form you will be able to see your files and folders.

each users files will be on a separate /x/y/[user id] folder.

So, on my x.com vhost directive i need to assign guest user at first then when user logs in i have to change the mpm-itk user so that user can work with his files.


Do you know how to change this user dynamically? and i have thousands of users and each login should change user to corresponding unix-user.

thanks.
D

[SuperQ]

mpm-itk only works on a per <VirtualHost> directive in the apache config.

in each <VirtualHost> you can use AssignUserID.

See the itk docs: http://mpm-itk.sesse.net/

[Nikolay Ulyanitsky]

Increase Apache Vhost Security With mpm-itk In RHEL/CentOS 5