We want to setup a shared webserver running Apache2 and PHP5. Our need is to host some PHP apps like Wordpress, Zend framework applications... Some of the sites may be controlled by external developers, so we need the security to be high.
We will like to run with php safemode = Off, because of the problems running ie. wordpress in safe mode.
How do we secure the access/permissions from the php-application to rest of the server? (How to secure that PHP-cade, can't access webserver config-files, logs etc.)
How do we secure the access/permissions between two sites? (How to secure that one site can't access files/data from another site)
We have considered taking advantage of the mpm-itk combined with open_basedir, but is it enough?
Is there a suggestion for the access rights on the servers filesystem?
What about disabling some functions like system(), exec() etc.?