[Gllug] Apache web root permissions

[Richard Jones]

On Fri, Nov 27, 2009 at 10:47:07AM +0000, Stephen Nelson-Smith wrote:
> I have a site running drupal.  The apache user therefore needs to be
> able to write certain files (CSS files for example).
> 
> I also have a directory under my web root which is a SAN mount, to
> which apache must be able to write.
> 
> What is the most secure way to implement this?
> 
> I am thinking:
> 
> chown -R root:apache /var/www/html
> chmod -R 0750 /var/www/html
> chown apache:apache for where need to write
> 
> Is there a better way?

Hmmmm .. SELinux?  I found this book to be interesting:

http://www.selinuxbyexample.com/

Rich.

-- 
Richard Jones
Red Hat
-- 
Gllug mailing list  -  Gllug at gllug.org.uk
http://lists.gllug.org.uk/mailman/listinfo/gllug