Asking about virtualhost home dir security

[tranbinhtam]

Hey everyone, I just installed Sentora into my VPS for 3 days. But I see permission of everything in /var/sentora/hostdata/ are also set to 777. Isn't this a security risk? [b]Doesn't that mean anyone can write to my home dir?[/b]

[b]I don't know how to Sentora secure that folder with permission set to 777. Plz give me an information, thank you![/b]

[Me.B]

No this is not the case try using PHP to list folders outside the server root, it won't work.

We are using SUHOSIN to sandbox the webserver, so you should never disable it.

M B

[TGates]

You can change the permissions to your liking,  but Sentora uses virtual users and each account is 'sandboxed' or locked down using suhosin and openbase_dir restrictions. If you disable either one of these server-wide or domain specific, you can open up your server to possible attacks.

[Cantalupo]

The settings do not allow access to mention folder.
Stay calm.

[Me.B]

We use suhosin to enforce open_basedir

http://php.net/manual/en/ini.core.php#ini.open-basedir