Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have a virtual host which has access to a directory outside of its document root. In the config for this host I specify the directory directive to allow access to this directory.

<Directory /path/to/shared/>
Options -Indexes
AllowOverride All
Order allow,deny 
allow from all  
</Directory>

The kind of files in this directory are things like images, ssi, facebook apps and some php scripts.

My question is, is this directive secure enough or do i need to add anything else?

Also, what is the ideal permissions for /shared

Thanks in anticipation

share|improve this question
add comment

1 Answer

up vote 0 down vote accepted

From the webserver's perspective it is fine. Next step would be to check the directory permissions and set them accordingly (restrict access to it for the webserver process owner).

Update: Not sure if you really need AllowOverride All as this can hit you in the face with a .htaccess-file inside the directory. I'd suggest you read up here to figure out what you really need. If you don't need .htaccess at all, just set it to AllowOverride None

share|improve this answer
    
thanks for the info! –  rix Dec 8 '11 at 13:44
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.