suExec and PHPsuexec
When compiling apache using EasyApache, you can set the suExec option. This forces the script or CGI file to be executed as the owner, and enforces permissions.
If you use PHP, you should consider using PHPsuexec. The advantage here is that all PHP scripts running on the server are ran as the owner of the script. This has the immediate benefit of being able to see which PHP processes may be taking up too many resources.
You may also consider selecting the “Suhosin php hardening” option during the EasyApache process. There are some common scripts that will not run due to Suhosin’s restrictions, so be sure to test it out of production before selecting it.
