Re: [CentOS] Running Apache sites as separate users

2011-09-30 Thread Trey Dockendorf
On Sep 30, 2011 1:49 PM, "Michael Crilly" wrote: > > I'm not sure why you would want each website on its own Apache process (as > that just isn't needed), but some of the ideas here are a bit... > over-the-top. > > There are a few options of improving the security of your Apache setup. You > can u

Re: [CentOS] Running Apache sites as separate users

2011-09-30 Thread Michael Crilly
I'm not sure why you would want each website on its own Apache process (as that just isn't needed), but some of the ideas here are a bit... over-the-top. There are a few options of improving the security of your Apache setup. You can use something like FastCGI based PHP applications or suPHP; both

Re: [CentOS] Running Apache sites as separate users

2011-09-30 Thread Trey Dockendorf
On Sep 30, 2011 11:43 AM, "John R Pierce" wrote: > > On 09/30/11 9:26 AM, Trey Dockendorf wrote: > > However they also > > want to have the CMS write to the .htaccess files to dynamically control > > which users can access the dowloads portion of the sites. That Im strongly > > against. > > CMS s

Re: [CentOS] Running Apache sites as separate users

2011-09-30 Thread John R Pierce
On 09/30/11 9:26 AM, Trey Dockendorf wrote: > However they also > want to have the CMS write to the .htaccess files to dynamically control > which users can access the dowloads portion of the sites. That Im strongly > against. CMS systems almost always use their own authentication and downloading

Re: [CentOS] Running Apache sites as separate users

2011-09-30 Thread Trey Dockendorf
On Sep 30, 2011 10:58 AM, "Drew" wrote: > > > I think Trey needs to push back - *IF* I understand him correctly, it > > sounds like duplicate websites, but running as different users. That, to > > me, literally makes no sense..., unless a) the source of the request > > doesn't understand what

Re: [CentOS] Running Apache sites as separate users

2011-09-30 Thread Drew
> I think Trey needs to push back - *IF* I understand him correctly, it > sounds like duplicate websites, but running as different users.  That, to > me, literally makes no sense..., unless a) the source of the request > doesn't understand what he wants, or b) there's something illegal going >

Re: [CentOS] Running Apache sites as separate users

2011-09-30 Thread Les Mikesell
On Fri, Sep 30, 2011 at 10:06 AM, wrote: >> >>> I had a recent request to improve security on my web servers by having >>> each website use a different user to run the hosting service.  So >>> example1.comhas it's own Apache instance running as apache1 and then >>> example2.com has its own instan

Re: [CentOS] Running Apache sites as separate users

2011-09-30 Thread m . roth
Jerry McAllister wrote: > On Thu, Sep 29, 2011 at 08:22:59PM -0500, Trey Dockendorf wrote: > >> I had a recent request to improve security on my web servers by having >> each website use a different user to run the hosting service. So >> example1.comhas it's own Apache instance running as apache1

Re: [CentOS] Running Apache sites as separate users

2011-09-30 Thread Jerry McAllister
On Thu, Sep 29, 2011 at 08:22:59PM -0500, Trey Dockendorf wrote: > I had a recent request to improve security on my web servers by having each > website use a different user to run the hosting service. So > example1.comhas it's own Apache instance running as apache1 and then > example2.com has it

Re: [CentOS] Running Apache sites as separate users

2011-09-30 Thread Craig White
On Fri, 2011-09-30 at 10:47 +0100, Hakan Koseoglu wrote: > On 30 September 2011 02:22, Trey Dockendorf wrote: > > I had a recent request to improve security on my web servers by having each > > website use a different user to run the hosting service. So > > example1.comhas it's own Apache instanc

Re: [CentOS] Running Apache sites as separate users

2011-09-30 Thread Hakan Koseoglu
On 30 September 2011 02:22, Trey Dockendorf wrote: > I had a recent request to improve security on my web servers by having each > website use a different user to run the hosting service.  So > example1.comhas it's own Apache instance running as apache1 and then > example2.com has its own instance

Re: [CentOS] Running Apache sites as separate users

2011-09-29 Thread Lucian
On Fri, Sep 30, 2011 at 2:22 AM, Trey Dockendorf wrote: > I had a recent request to improve security on my web servers by having each > website use a different user to run the hosting service.  So > example1.comhas it's own Apache instance running as apache1 and then > example2.com has its own ins

Re: [CentOS] Running Apache sites as separate users

2011-09-29 Thread Dennis Jacobfeuerborn
On 09/30/2011 03:31 AM, John R Pierce wrote: > On 09/29/11 6:22 PM, Trey Dockendorf wrote: >> I had a recent request to improve security on my web servers by having each >> website use a different user to run the hosting service. So >> example1.comhas it's own Apache instance running as apache1 an

Re: [CentOS] Running Apache sites as separate users

2011-09-29 Thread John R Pierce
On 09/29/11 6:22 PM, Trey Dockendorf wrote: > I had a recent request to improve security on my web servers by having each > website use a different user to run the hosting service. So > example1.comhas it's own Apache instance running as apache1 and then > example2.com has its own instance of Apac

[CentOS] Running Apache sites as separate users

2011-09-29 Thread Trey Dockendorf
I had a recent request to improve security on my web servers by having each website use a different user to run the hosting service. So example1.comhas it's own Apache instance running as apache1 and then example2.com has its own instance of Apache as apache2. Is this even possible or realistic?