Results 1 to 4 of 4

Thread: Apache sites as different users

  1. #1
    Join Date
    Sep 2011
    Beans
    3

    Apache sites as different users

    We have a LAMP setup serving multiple CMS that are used by different end-users. Recently a plug-in for a joomla site wasn't being properly patched by one of those end-users and that site was hacked. Currently all of the sites run as the same ubuntu user in apache and we would like to run each site as a different ubuntu user to eliminate the security issues if one of the sites is hacked. Can anyone offer directions for how to do this or point me to some documentation? Thanks.

  2. #2
    Join Date
    Jun 2011
    Location
    Las Vegas
    Beans
    Hidden!
    Distro
    Ubuntu 8.04 Hardy Heron

    Re: Apache sites as different users

    The easiest why would be to run PHP with fastcgi. Your problem is most likely not Apache itself but vulnerable PHP scripts.

    Sounds like you are still running PHP under mod_php.

    cPanel for example you could do this in a few clicks and each website/cPanel user & their user-traffic would access PHP as different user accounts thus restricting security issues to only that user. But cPanel isn't Ubuntu compatible. http://cpanel.net/cpanel-whm/system-requirements/

    So you would have to do this manually. Its not hard but you just have to know how or find someone to do it.

  3. #3
    Join Date
    Aug 2009
    Beans
    Hidden!

    Re: Apache sites as different users

    http://httpd.apache.org/docs/current...ms/suexec.html
    http://docs.joomla.org/How_do_phpSuE...ssions_work%3F

    *cPanel is "just" a web-based management panel and most that provide, deploy or run it shouldn't be running it in the first place IMNSHO.

  4. #4
    Join Date
    Sep 2011
    Beans
    3

    Re: Apache sites as different users

    Thank you both! I setup cpanel today and it seems there is a way we can use it that will also help with some of our other annoyances. Thank you again!!!

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •