Jun22

Apache UID by VHost

by Nick on 2012/06/22 at 18:03
Posted In: Apache

Credit

You might want to increase security on your webserver by limiting what each VirtualHost or site can access. Whether you’re acting as a shared host or just want to separate your own sites, you can use the Apache2 mpm-itk module to do this. The linked article above explains how to accomplish this using Apache2 and Debian, but I will explain the simple steps required to do so on OpenSuse.

  • Using Yast or zypper, install the module “apache2-itk”.
  • Edit the file at /etc/sysconfig/apache2
    • Set the APACHE_MPM value to itk (ie APACHE_MPM=”itk”)
  • Add the following to your VirtualHost configuration (within the “VirtualHost” tags but not in any “Directory” tags)
    • <IfModule mpm_itk_module>
      AssignUserId owner group
      </IfModule> 
  • Update the file permissions on your VirtualHost DocumentRoot (chown owner:group -R somedirectory/)
  • Restart apache (/etc/init.d/apache2 restart)
└ Tags: , , , , ,