Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[Thad]

What kind of accounts are we talking?  It's been ages since I worked with Red Hat, but I remember it being pretty trivial to set up FTP-only accounts.

If you're talking shell access, the most important thing is chroot, but there IS more hardening to do beyond that.

[JDigital]

The way Pyoko was set up, you could read anyone else's files if you knew the path and filename. Dreamhost is set up the same way, except the user list is hidden to give the illusion of security.

Dreamhost's "secure" setting is to set your homedir's group to the apache user, and its permissions to 750. If I understand my linuxes, this allows apache read access to your homedir and its subfolders, while forbidding other users. Its PHP uses suexec and FastCGI so that PHP runs as the user, so you can't write a script to read someone else's files using apache's permissions.

[Thad]

I think you mean "apache group", not "apache user", but other than that it makes sense.

At any rate, isn't the stuff that's actually accessible from the Web generally stored in a subdirectory (~/www, ~/public_html, etc)?  Sticking an entire homedir on the Web does seem like a pretty terrible idea.



PS I had to click on your name to figure out who the hell you are.  Never been a fan of that.

[Classic]

Psst:
It's JDigital.

...
...
He had to tell me directly.

[Mongrel]

I was wondering who the hell that was.

[JDigital]

At any rate, isn't the stuff that's actually accessible from the Web generally stored in a subdirectory (~/www, ~/public_html, etc)?  Sticking an entire homedir on the Web does seem like a pretty terrible idea.

The entire homedir isn't web-accessible on Dreamhost, only a subdir. The apache user can technically access your entire homedir, but suexec means PHP doesn't run as the apache user.

[Aintaer]

The CMS is complete for the purposes of posting, by the way. I'm using it for managing my own thing: Colloquy

As for web hosting on brontoforum.us, it was not an option when I started writing the CMS. Nor is it still an option right now until Brentai actually allows real users with full LAMP stack ready.

[Mothra]

DN: Draw another one of these please.

[Disposable Ninja]

Sure. In fact you even get to pick the joke! Which would you find funnier? Telling a high school girl she's so ugly that she begins to cry, or a horrifying, highly detailed drawing of somebody with terrible congenital defects?

[Lottel]

BOTH

[Mothra]

Sure. In fact you even get to pick the joke! Which would you find funnier? Telling a high school girl she's so ugly that she begins to cry, or a horrifying, highly detailed drawing of somebody with terrible congenital defects?

Do you perhaps have a less unfortunate unfortunate happening about which we may jest

Like maybe a large beetle got caught inside your house and you didn't know how to get it out and this caused several comedically exaggerated expressive relenting frowns

[Classic]

... I hope those aren't secretly the same comic.

[Disposable Ninja]

... I hope those aren't secretly the same comic.

They're making fun of the same thing, yes. I'm just trying to figure out the best punchline.

BOTH

Nah, that'd be overkill.

Do you perhaps have a less unfortunate unfortunate happening about which we may jest

I was intentionally making it sound more horrifying than it actually is. Don't worry, the second you see it you'll go "Oh." Maybe even "Oh. Ha."

Like maybe a large beetle got caught inside your house and you didn't know how to get it out and this caused several comedically exaggerated expressive relenting frowns

I started taking Prozac. I feel too damn good to make fun of myself.