On Mar 10, Olaf van der Spek <olafvds...@gmail.com> wrote: > Would it be possible to start FastCGI processes via spawn-fcgi and to run > Lighttpd as another user than www-data (maybe user lighttpd)? > I think this improves security as FastCGI processes can no longer touch > Lighttpd (and it's log files).
I believe that the correct solution would be to start the FastCGI processes as a different user (or multiple different users, e.g. one per web site or site component). This would not require changing the lighttpd default configuration. -- ciao, Marco
signature.asc
Description: Digital signature
