Chroot question

[nolanpro]

Hi! I installed ispconfig via centos5 tutorial from scratch. Everything works perfectly but it doesn't look like users are jailed. When I create a user under a site in ispconfg, then log into the shell, they are able to view other accounts (they can read db passwords in other account's php files).

php's realpath() shows /var/www/web12/web. Ideally this should show /htdocs/www or something similar that would be the same across all accounts.

Thanks for your help!

[till]

Users are not jailed if you did not enable it for every login type that shall be jailed as programs like ssh do not support this without patches.

Which program do you use to login? FTP or SSH? For PHP you will have to enable safemode too.

[nolanpro]

Thanks, I'm more interested in making the file path the same for all users (of course, pointing to different files). For example, all users web files would appear to be in /htdocs/www to them but the actual path would be something like var/www/the_user_name/htdocs/www. I'm looking into two options now. suPHP and mod_chroot, or both. Anyway, hopefully one works.