I'm finding it hard to find advice on the ideal permissions for a website folder structure on RHEL5.
I want multiple users to be able to change/add/remove files within the website folders - but certain files like the ones containing database passwords need to be protected so that team members can't do anything to them (read/delete).
I was going to create a group 'www', add apache and all the users to that group, add all the files and folders to this group, then make the db password files owned by apache, group apache - however I've found that if the directory has write permissions to the www group, then they can still delete (and recreate) the password file.
Is the only solution to move the password file into it's own directory and remove the write permissions?