Securing Mass Virtual Hosting
I'm currently setting up a machine to do virtual hosting. It's a FreeBSD system running Apache 1.3. I've decided to use Dynamically Configured Mass Virtual Hosting, as it doesn't require a restart of apache to add hosts.
I am having a problem though. I can't come up with a way to prevent users from reading each other's scripts, which is clearly a problem. I can't use suexec, as it requires a <VirtualHost> entry for each host with the user specified.
Any advice is greatly appreciated. Thanks.
-Phil
