[plug] Query about Apache

[Matt Kemner]

On Tue, 28 Jul 1998, Tony Clark wrote:

> The users home directory must be readable ie /home/fred drwxrwxr--

For directories they need to be executable for "others" to be able to
access anything in the directory - so drwxrwx--x would do the trick (and
is a better idea because people can't do a directory listing of the dir,
only access files in the dir, if the permissions on that file permit.

The best setup is to set /home/fred and /home/fred/public_html to mode 711
(drwx--x--x), all files under /home/fred to mode 600 or 700 depending on
whether they need to be executable or not (-rw------- or -rwx------) and
all files in /home/fred/public_html to mode 644 (-rw-r--r--)

That way people can't do dir listings of either of the dirs, can't access
any of the files in /home/fred, but can access any file in the public_html
dir (as long as they know the name of it) and if an index.html exists, it
will be shown instead of /~fred/ as per usual.

 - Matt