Can lsws check directory and php script permissions?
 

Hello,
I am currently trying to secure lsws in a shared environment and have used the Required Permission Mask and Restricted Permission Mask for static files to lock them into being served only if static files are between 444 and 644 permissions. My question is twofold, the first aspect pertaining to applying the mask to .php extension files. What I am trying to achieve is suPHP style permissions checking so that php files are only served at 444-644 perms, basically I would just need a way to apply the static masks to the .php extension. Is this possible? Second question is on directory permissions checking, is it possible to apply a restricted permission mask to directory permissions like suPHP does? e.g. - if the directory is 777 do not serve content out of it. Please let me know if anyone has a way to do this natively or if there is any alternate workaround.

Thanks in advance!

Litespeed does not implement suphp like permission check, if you want, you can use suhosin.

Suhosins feature set does not include a facility to do this as far as I can see. Since you suggested suhosin I will ask, how were you thinking I could accomplish this with it?

Sorry, I was wrong, not sure where I got the false impression.
We will add the script permission check in our to-do list.

Excellent mistwang! Directory permissions checking would be a great thing as well if that can be done.

Thanks! :)