[nylug-talk] apache2 file permissions

[Mark]

Hi,

I'm running several virtual hosts under apache2. I've put all the virtual host document roots under one system user (/home/$user/virt1, /home/$user/virt2, etc), and therefore all the files are owned by that system user. The reason I haven't put my virtual domains under /var/www is because I didn't want the html files to be owned by root. I've done this out of ignorance since I'm not sure if root owning html files poses some kind of security risk. 

Anyway there hasn't been any problems running things this way so far, until I tried setting up sugarcrm, and was told the file ownerships have to be the same as the system user apache runs under. So I have 2 questions:

What should be the ownership and permission settings for html files, php and cgi scripts?

Should I move all my virtual host document roots from /home/$user/virtx to /var/www/virtx?

Thanks,

Mark