2

Let's say I have a server and a bunch of developers working on different sites(php and django) and I don't want the different developers to access each other's sites.

How should I go about implementing such a solution? (some pointers will do)

5 Answers 5

2

i think, under apache suEXEC will do the job.

4

suPHP does this very well. There is a solution with Apache by using setuid and setgid.

2
  • Yes, for the PHP stuff suPHP should do the trick well. This way the PHP scripts only need to be readable for to the developers own accounts, as PHP will execute with respective users permissions.
    – andol
    Dec 6, 2009 at 22:45
  • That's exactly it ! Dec 7, 2009 at 7:27
0

You need to chroot your FTP uploads (easy in Proftpd). If it is SCP uploads, you must make SSH directory chrooted (special patches needed).

0

Antoine is right. You can check this link for setting up a apache-suphp webserver.

http://techtrunch.com/installations/compile-apache-suphp-ubuntu

suPHP is a tool for executing PHP scripts with the permissions of their owners. It consists of an Apache module (mod_suphp) and a setuid root binary (suphp) that is called by the Apache module to change the uid of the process executing the PHP interpreter.

In suphp configuration the files must be in the ownership of the user, other wise php file requests will end up in Internal Server error.

-1

if you are talking about through just ftp, thats file system permissions that controls that.

1
  • No, they don't. Dec 7, 2009 at 13:52

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .