Webmasters Stack Exchange is a question and answer site for pro webmasters. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

What is best practice for using suEXEC on complex sites?

We've got a site running under a single vhost, and we want to be able to run different PHP web apps eg /forum /wiki /crm as their own UIDs, to help isolate any potential security threats.

I've used apache2 + mod_fastcgi + mod_suexec to split multiple sites to unique UIDs by vhost before. However, mod_suexec's SuexecUserGroup directive only works inside a <VirtualHost> block, and is not valid in a more specific <Directory> or <Location>

Is changing to lighttpd + suexec the only way to achieve this level of isolation without resorting to using a rewrite/proxy hack?

share|improve this question

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.