11 reputation
1
bio website
location
age
visits member for 1 year, 6 months
seen Apr 23 '13 at 15:49

Feb
18
comment Properly Set Permission to /home/user folder for webserver
I think I got it. I ran phpinfo() at the professional host that runs php as apache module, and it seems together with the php module, suexec is installed. This must be the cause why I can't open others' homes while still being able to view my own home + /. I will simply install suexec then. Thanks!
Feb
18
comment Properly Set Permission to /home/user folder for webserver
Okay let me try again: I made a PHP shell that is simply a directory listing and a path input. With this simple script I can navigate to / or whatever including other users' home. I tested my script on a professional hoster and I can also go to / or whatever EXCEPT for the homes of other users. I want this same protection so that "hackers" can not see the content of other users. In fact, I would like the home folder to be viewed as empty or "access denied". Note, every user has one or more domains assigned to it, so the sites should still be viewable.
Feb
18
awarded  Student
Feb
18
comment Properly Set Permission to /home/user folder for webserver
Thanks for your fast reply, however, this would mean that only root and the owner of the file can execute it, but PHP runs as apache module so the apache user should be able to run it. The twist here, is that apache should somehow "respect" the owner of the folder..
Feb
18
asked Properly Set Permission to /home/user folder for webserver