I have this folder structure :
RootFolder
Export
Files
Site
and want the access to the files (source code) in Export and Site to be allowed only for a group of user in "priv_group" and not allowed for others even for server administrator (but other users should still be able to run the scripts in Export and site folders). "Files" folder should be accessible for all.
I'm using an apache server on linux
the only requirement that i want to achieve with this, is that no other non "priv_group" user should be able to see or copy the source code
i thought of doing this:
apache process running by group : www-data
group of users that should have access to source files : priv_group
drwxrwx--- www-data priv_group Files/
-rwx--x--- priv_group www-data Export/
-rwx--x--- priv_group www-data Site/
is this enough and would it prevent access to website pages (in Site/) and for scripts files that should be run by other users (in Export/) ?
Any advice on the setup i should do to achieve this ?