On a Gentoo 3.2.12 server with
apache2+php, there are several websites running:
/www /website1 /website2 ...etc
apache user should have read-only access to all the websites. There are also a few folders inside each website where
apache should have read-write access (upload folders and the like).
There are several people who work on these websites. Each person should have read-write access to the website(s) they work on, but not others. Also, they should be able to set permissions (within their websites) so that
apache can write to some folders (well, if they create a new upload folder or something).
Other users shouldn't have access to
/www at all.
Can this be done and how?
(PS. Also... since these people can upload PHP scripts which are then executed in the context of Apache, I guess they can access other websites too, indirectly... is it possible to secure this as well? I can't think of a way, but who knows...)