Take the 2-minute tour ×
Webmasters Stack Exchange is a question and answer site for pro webmasters. It's 100% free, no registration required.

What is best practice for using suEXEC on complex sites?

We've got a site running under a single vhost, and we want to be able to run different PHP web apps eg /forum /wiki /crm as their own UIDs, to help isolate any potential security threats.

I've used apache2 + mod_fastcgi + mod_suexec to split multiple sites to unique UIDs by vhost before. However, mod_suexec's SuexecUserGroup directive only works inside a <VirtualHost> block, and is not valid in a more specific <Directory> or <Location>

Is changing to lighttpd + suexec the only way to achieve this level of isolation without resorting to using a rewrite/proxy hack?

share|improve this question

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.