[CentOS] Running Apache sites as separate users

Lucian lucian at lastdot.org
Fri Sep 30 02:35:23 UTC 2011


On Fri, Sep 30, 2011 at 2:22 AM, Trey Dockendorf <treydock at gmail.com> wrote:
> I had a recent request to improve security on my web servers by having each
> website use a different user to run the hosting service.  So
> example1.comhas it's own Apache instance running as apache1 and then
> example2.com has its own instance of Apache as apache2.  Is this even
> possible or realistic?  I understand the idea of how that would be secure,
> much like creating a virtual machine to segregate services.  The only way I
> can think how this is done is to chroot each website.  What makes this
> request even stranger is that each website will be managed by the same CMS
> and code base.  So with that being the case, I don't see how this is
> possible.  Any ideas or insight are very welcome.

Is there a specific requirement to run different http servers? Because
if there is not then you can just use Suexec+fastcgi.
Otherwise, just use Apache to proxy stuff to backend servers (can be
anything from apache to nginx).

HTH



More information about the CentOS mailing list