[axxs-sysadmin] Apache configuration for normal users

Cameron Gregg cam at earthanarchy.org
Wed Dec 2 00:24:19 PST 2009


Torrance wrote:
> Hiyas,
> 
> I'm trying to work out an apache setup that will allow normal users
> to edit their own domain conf files etc. without needing elevated
> privileges. How does this sound:
> 
> 1. Set apache to search /var/www/*/apache.d/* for domain
> configuration files which are user owned. 2. SETUID apache2ctl and
> link the binary into /usr/local/bin so that normal users can reload
> apache with new configurations (eg. apache2ctl --graceful)
> 
> Are there problems with this that I'm not seeing? Or a better way,
> perhaps?
> 
> Torrance

I don't think we should allow normal users access to restart apache.
People can drop into #axxs and ask for a restart.

We can own /etc/apache2/sites-available/domain to the user who runs the
site.

Cam


More information about the axxs-sysadmin mailing list