On a Gentoo 3.2.12 server with apache2+php, there are several websites running:/www    /website1    /website2    ...etcThe apache user should have read-only access to all the websites. There are also a few folders inside each website where apache should have read-write access (upload folders and the like).There are several people who work on these websites. Each person should have read-write access to the website(s) they work on, but not others. Also, they should be able to set permissions (within their websites) so that apache can write to some folders (well, if they create a new upload folder or something).Other users shouldn't have access to /www at all.Can this be done and how?(PS. Also... since these people can upload PHP scripts which are then executed in the context of Apache, I guess they can access other websites too, indirectly... is it possible to secure this as well? I can't think of a way, but who knows...)
How to set secure permissions for multiple users and multiple websites?
permissions;security;php;gentoo;apache httpd