Re: php: /var/www/html & file owner

["Matthew Gillen" <user=50@nabble.blu.org>]

 eric c wrote: 
> Hi all.  I'm moving from a shared web host to rolling my own.  Getting 
> everything running was so easy I'm nervous!  In particular I would like 
> to make sure PHP / httpd stay within /var/www/html.  Am I running an 
> additional risk by having the owner of the files within that directory 
> being a user other than root?   

No, as long as you don't allow apache to follow symlinks (and don't allow 
overrides of that setting via .htaccess) 

> The intersection of php / httpd / selinux 
> permissions are currently unclear, any suggested reading?  Many thanks! 

Sure.  The fedora docs on SELinux are a good place to start (most of it is not 
fedora-specific, but rather specific to the targeted policy): 
http://fedoraproject.org/wiki/SELinux

and in particular, the man page for the targeted-httpd policy: 
http://fedoraproject.org/wiki/SELinux/apache

There's an older link that talks in more general terms about the httpd policy, 
but it is somewhat old (circa FC3): 
http://docs.fedoraproject.org/selinux-apache-fc3/

HTH, 
Matt 

-- 
This message has been scanned for viruses and 
dangerous content by MailScanner, and is 
believed to be clean. 

_______________________________________________ 
Discuss mailing list 
[hidden email] 
http://lists.blu.org/mailman/listinfo/discuss