We're setting up a CentOS 6.2/ Apache web server with higher security requirements than I'm used to.
I've set up a user group called "web" and I want to limit it's members to only being able to read, write and execute in /var/www/html/ and subdirectories.
Members of the "web" group should not be able to access any other part of the server (although individual user home directories are fine).
I thought this would be straight forward but have been going around in circles for the past half hour.
What bash commands do I need to use to achieve this?