Re: Apache webroot & webapp-config security Wim Cossement wrote:
> Thanks for both tips, I aready took the x from all my PHP files, but the
> second suggestion about changing the all files in /var/www/ to
> root:apache 0640 does not do the trick, I always get a 403 error when I
> tried this.
>
> This seems unlogical too me, since apache runs as apache:apache so it
> shoud be able to get me the files since the group can read them.
The files should be owned by apache and not root, as this leads to that apache
may not have the right to read the file in question.
//Aho |