[clue-tech] DocumentRoot permissions [was Re: Presentation on Ubunto/Debian?]

David Anselmi anselmi at anselmi.us
Mon May 30 10:32:19 MDT 2005


Collins Richey wrote:
[...]
> One thing I'm curious about, security-wise. On Kubuntu, Debian too?,
> the root web directory is /var/www owned by root:root whereas RedHat
> and others put the root directory in /var/www/<somethingelse> usually
> owned by apache:apache. Isn't root ownership of the web directory a
> bad idea (TM)?

Why would root ownership be a bad idea?  Your confusing file ownership 
with process ownership, I think.

Dave



More information about the clue-tech mailing list