I have created a user and a group named the same (lighttpd:lighttpd)
Now I have to start the lighy server with these user:group... ok
Now, I have added a website (vhost) to run with lighy, it works well, but I have a question about permissions. For the vhost I've created another user and then I added it to lighttpd group.
Now, if I create other vhosts I will create new users, but if they have the same group each domain can view the files inside the other vhosts, so what can I do to block this?
Because if I change the permission on each vhost to allow only the owner(600) to see the files...I think I will have a problem with lighttpd (it can't read the page).
If i use 640 also the other vshots owners can view all the files because they have the same group.
Could you tell me the best manner to set permissions?