[users@httpd] Apache secure for ISP !!! SOS-SOS

[Nguyen Thanh Binh <bi...@vnn.vn>]

Dear All,
I see that apache has got one problem. It is:
When config multi hosting can not prevent user travel other folder ?
Exp bellow:
/
    |_ hst
        |_ hst1
        |_ hst2
here are httpd.conf:
...
user nobody
...
<virtualhost hst1>
DocumentRoot /hst/hst1
...
</virtualhost>

<virtualhost hst2>
DocumentRoot /hst/hst2
...
</virtualhost>
...

Because user nobody has read permission on hst1 and hst2 then when use 1
script in /hst/hst2 exp perl:
...
opendir(DIR,"/hst/hst1")
@files = readir(DIR);
closedir DIR;
foreach $f (@files) {
    to do something with $file
}
...
Anonymous or user owner hosting hst2 can be read file on other hosting.

Has anybody got solution solve it.

Regards,

Thanh Binh