April 13th, 2002, 10:51 AM
Prevent user snooping
I have a cobalt RaQ with redhat installed.
I'm wondering how to prevent users with shell access from snooping into other peoples virtual sites. Right now they can look at PHP source code etc. I don't want this to happen.
What can we do.
user: kai is the administrator of www.kai.com
home dir: /home/sites/site30/users/kai
doc root: /home/sites/site30/web/
he can go stray into:
and view anything he/she likes.
How do you prevent this while still allowing files to be accessible on the web?
April 14th, 2002, 04:54 AM
Do a search globally here with the search keyword: suExec under my username.