How to properly protect Apache2 after fresh install?

<Ol>Origy · 08-19-2005, 02:28 AM

Heya!

I have recently installed Apache 2 from source code on my Slackware linux 10.1.
Now the thing I am interested in is how to properly chmod/chgrp/chown the directories and files in each directory (/usr/local/apache2) to ensure best protection against possible hacks. Most directories and files (if not all of them) come with rwxr-xr-x permission as the installation didn't seem to change any permissions.

Thanks.
~ Ol

Moloko · 08-19-2005, 07:34 PM

rwxr-xr-x for directories and rw-r--r-- for files. On Debian all files (afaics) are owned by root.root. Except a /usr/lib/apache2/suexec2 file, which is executable and owned by root.www-data.

<Ol>Origy · 08-20-2005, 02:22 AM

Thank you for your answer.
I remember that on Red Hat 9 the logs directory and the files in it were only accessible by root.