Skip to main content
Webmasters

You are not logged in. Your edit will be placed in a queue until it is peer reviewed.

We welcome edits that make the post easier to understand and more valuable for readers. Because community members review edits, please try to make the post substantially better than how you found it, for example, by fixing grammar or adding additional resources and hyperlinks.

Required fields*

4
  • 1
    Can you explain what you mean by non-shared configuration?... Are you running different Apache Processes under a different user group for each? if so then you need to do chmod -R 0700 this will allow only the owner to read, write and excute. Commented May 28, 2016 at 17:37
  • 1
    @SimonHayter, "... what do you mean by non-shared configuration..." - My bad; I added additional information. The short of it is there's a single Apache user, a single MySQL user, etc. There are no hardships created from multiple subscribers. "... then you need to do chmod -R 0700..." - OK, thanks. Where do these tweaks need to be performed? (This is my pain point - I can't find a governing document for best practices or guide to loosening security from a firmer posture). Commented May 28, 2016 at 18:01
  • @jww It might be in scope to ask this on ServerFault if you want to give that a try, given you manage your own server. (Check posting rules there first though, and let us know here if you do) Commented May 30, 2016 at 22:35
  • @Tim - the problem is we are not professional admins. Its been my experience that questions that appear to fall under server fault are not well received when its something a non-professional asks (like and Open Source project). I've had so many bad interactions with the site I don't even like to visit them. Its why I treat [my] "Open Source project running a web server" questions as the hobbyist question more suited for Super User or Pro Webmasters. Also, I don't ask on Pro Webmaster unless its a production server. Commented May 30, 2016 at 23:22