Re: shared hosts and MP2 security

[prev] [thread] [next] [Date index for 2004/12/23]

Nick *** wrote:
> Let's assume that I have a web server with 50 virtual hosts. This web server is apache2 running as user nobody and has php installed. I've set php's OPEN_BASEDIR option for every VHost, so I can restrict the users' IO access outside their directories. Now I want to install MP2 on the same server. I am setting a different interpreter pool for  every VHost. And now how do I make sure that VHost1 user doesn't open($file, "<", "/www/VHost2/mysql_user_and_pass.pl").
> 
> P.S. Can I use interpreter pools with prefork MPMs?

You can. But it's not going to help you with this specific issue.


        -- 
        __________________________________________________________________
Stas Bekman            JAm_pH ------> Just Another mod_perl Hacker
http://stason.org/     mod_perl Guide ---> http://perl.apache.org
mailto:stas@xxxxxx.xxx http://use.perl.org http://apacheweek.com
http://modperlbook.org http://apache.org   http://ticketmaster.com

-- 
Report problems: http://perl.apache.org/bugs/
Mail list info: http://perl.apache.org/maillist/modperl.html
List etiquette: http://perl.apache.org/maillist/email-etiquette.html