Skip to main content
Unix & Linux

You are not logged in. Your edit will be placed in a queue until it is peer reviewed.

We welcome edits that make the post easier to understand and more valuable for readers. Because community members review edits, please try to make the post substantially better than how you found it, for example, by fixing grammar or adding additional resources and hyperlinks.

Required fields*

5
  • As far as I know, the best solution is sandboxing (virtual machine for each client). However there may be some solution around umask. Commented Mar 16, 2014 at 2:23
  • How are these users authenticating? Are they all in the same group? What OS are you running? Why do they have read access to other user's directories in the first place? Commented Mar 16, 2014 at 2:28
  • Read access is necessary because apache needs to read these files, and what's even worse some do CHMOD 777 to their files for wordpress and other apps. It's a Debian box. Commented Mar 16, 2014 at 2:38
  • @terdon they're authenticating via SSH and FTP. I wouldn't mind disabling SSH but it still wouldn't solve the problem as mentioned in the question. Commented Mar 16, 2014 at 2:45
  • What user and group is Apache running as? Read access to other users is not necessary, only read access by the Apache daemon. If your users go and muck up the permissions, it's a human problem, but they shouldn't have to do that. Commented Mar 16, 2014 at 2:59