"Peter Olcott" <NoS...@SeeScreen.com> writes: > How do I make files and folders inaccessible to the public > on a webserver?
> I want to allow execute access to a specific webservice, but > deny all other access to everything else.
All access? Don't put the files on the server.
If you want limited access, look up .htaccess
There are many possibilities in between. -- As we enjoy great advantages from the inventions of others, we should be glad of an opportunity to serve others by any invention of ours; and this we should do freely and generously. (Benjamin Franklin)
On Saturday 07 November 2009 15:12 in comp.os.linux.security, somebody identifying as Peter Olcott wrote...
> How do I make files and folders inaccessible to the public > on a webserver?
> I want to allow execute access to a specific webservice, but > deny all other access to everything else.
(1) Make sure Apache - I am assuming Apache as the webserver; substitute by whatever webserver you are running - is not running with root privileges and that it does not have read access to the files.
(2) Use the ".htaccess" file and/or implement Access Control Lists.
Peter Olcott wrote: > How do I make files and folders inaccessible to the public > on a webserver?
> I want to allow execute access to a specific webservice, but > deny all other access to everything else.
Controlling "public access" over http, ftp, shell, or, or all of them? Who/what do you need to allow access to view or execute said filers/programs? -- Not really a wanna-be, but I don't know everything.
|
