3 ms·
This should be a more common configuration and it would be nice if web apps themselves promoted using different OS identities for sensitive parts. W^X and privi
by lmz 12y ago
This should be a more common configuration and it would be nice if web apps themselves promoted using different OS identities for sensitive parts. W^X and privilege separation are widely used in daemons, why not in web apps?
- Rapzid 12y agohttp://codex.wordpress.org/Hardening_WordPress#File_Permissions http://codex.wordpress.org/Hardening_WordPress#File_Permissi... People just don't RTFM. It has been mentioned in Wordpress's hardening information for years and years aoubt having the web server process running as a separate user than the file owners along with the proper permissions.