OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Dmitry Mottl (dimasinp.msu.ru)
Date: Thu Nov 15 2001 - 05:05:10 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    Hi, All

    I have to configure www virtual hosts under Apache
    and I need that all virtual hosts have NO access (through cgi execution) to each
    other.

    Is it good to start up proxy on 80 and
    about 100-300 backend httpd (each under it's own uid and gid),
    which will be paged in (from swap) if connection is requested.

    Is there a better solution?

    It seems that suexec apache mechanism will no help,
    cause I have to give hosters GID to access there files,
    so I can't specify properly permissions due to UNIX file security (uuugggooo).
    In this case I need to choose if GID=wwwguest or GID=hoster

    May be to set up a patch to use UFS extended attributes? (www.trustedbsd.org)
    I'm using FreeBSD 4.4-RELEASE 

    --
best regards,
Dmitry Mottl

    To Unsubscribe: send mail to majordomoFreeBSD.org
with "unsubscribe freebsd-security" in the body of the message