Gentoo Logo
Gentoo Spaceship




Note: Due to technical difficulties, the Archives are currently not up to date. GMANE provides an alternative service for most mailing lists.
c.f. bug 424647
List Archive: gentoo-admin
Navigation:
Lists: gentoo-admin: < Prev By Thread Next > < Prev By Date Next >
Headers:
To: gentoo-admin@g.o
From: Daniel Faber <mail@...>
Subject: Re: shared gentoo linux hosting
Date: Thu, 13 Oct 2005 17:59:15 +0200
On 13/10/05 17:28, Dmitry Lukashin wrote:

>>With ability to modify apache config & crontab for user using ssh
>>access?
> 
> Try to use <VirtualHost></VirtualHost> for each user in separate file.
> And change permission on that file to user you want allow editing it.

Don't do that unless you fully trust your users.  If they can modify
(parts of) the apache config without any control, they will be able to
do bad things with apache's permissions.  They can easily change any
file apache has write access to by just use such a file as logfile for
their vhost, for example.

I'm not an apache expert, but I think there are a lot more possibilities
to do bad things :-)  Maybe they can load self written apache modules
and then they will be able to do _anything_ apache can do.

> Same with crontabs

Common cron daemons use separate crontabs for each user, you don't have
to do anything to get the desired functionality.

Daniel
Attachment:
signature.asc (OpenPGP digital signature)
References:
shared gentoo linux hosting
-- Okulov Vitaliy
Re: shared gentoo linux hosting
-- Dmitry Lukashin
Navigation:
Lists: gentoo-admin: < Prev By Thread Next > < Prev By Date Next >
Previous by thread:
Re: shared gentoo linux hosting
Next by thread:
Re: shared gentoo linux hosting
Previous by date:
Re: shared gentoo linux hosting
Next by date:
Re: shared gentoo linux hosting


Updated Jun 17, 2009

Summary: Archive of the gentoo-admin mailing list.

Donate to support our development efforts.

Copyright 2001-2013 Gentoo Foundation, Inc. Questions, Comments? Contact us.