[mod-security-users] Idea/feature request

[Vincent D. <vi...@gr...>]

Greetings,

What if mod_security would, by default, deny access to files that are
777/writable by the httpd user? Could be considered an interesting
feature, especially if it could be setup on a file per file basis, with
the usual apache inheritance system...

I have no clue whether this would be possible to implement into
mod_security, as it doesn't manipulate filesystem objects (or does it?)

Anyway, just an idea that was passing on #apache...


Cheers,

Vincent