We use Ubuntu here , but by now I can'tsay that we're exactly fond of it. At this point we're using it notbecause we like it but because we lack a better alternative, whichgives me a somewhat jaundiced perspective.

A disclaimer: this is about Ubuntu 6.06 (Dapper Drake, the LTS releasethat will be supported for a long time). Moving to more recent Ubuntureleases is not an option for us, because we need longer support periodsthan 1

Here's something important for file ownership on web servers:

The user that the web server runs as should not own anything that the webserver serves.

This means that the web server's user shouldn't own anything under thedocument root or in CGI areas, and there shouldn't be any writeabledirectories under either that it can use to put things in. Stronglyresist the temptation to have CGIs write data files under the CGI areaor in the docroot, even if they are normally blocked from being