Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a virtual host which has access to a directory outside of its document root. In the config for this host I specify the directory directive to allow access to this directory.

<Directory /path/to/shared/>
Options -Indexes
AllowOverride All
Order allow,deny 
allow from all  

The kind of files in this directory are things like images, ssi, facebook apps and some php scripts.

My question is, is this directive secure enough or do i need to add anything else?

Also, what is the ideal permissions for /shared

Thanks in anticipation

share|improve this question
up vote 0 down vote accepted

From the webserver's perspective it is fine. Next step would be to check the directory permissions and set them accordingly (restrict access to it for the webserver process owner).

Update: Not sure if you really need AllowOverride All as this can hit you in the face with a .htaccess-file inside the directory. I'd suggest you read up here to figure out what you really need. If you don't need .htaccess at all, just set it to AllowOverride None

share|improve this answer
thanks for the info! – rix Dec 8 '11 at 13:44

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.