Re: [cobalt-users] MAJOR BUG, Browse any directory view any file

["Mike Palamar" <mike@xxxxxxxxxx>]

 >cd /home
> chmod 711 sites
>
> Just run the above commands and you won't have that issue any more. This
> is now standard operating procedure on all Cobalts I maintain. If you
> let customers have shell access on your Cobalts, this is a MUST-HAVE!!

I do the following:
chmod 711 /home/sites
chmod 750 /home/sites/*
chown httpd /home/sites/*

The first command stops directory listings.
The 2nd command stops people from outside the group/owner from viewing the
files.
The third command allows the web server to read and execute scripts.

I also have a php.include file that sets the base directory(plus a few other
security directives) for each account. This is done on a RAQ3 with Apache
1.3.27.