# #defaults chmod -R g-s /etc/httpd setfacl -R -b -d -m g::rwX /etc/httpd setfacl -R -b -d -m o::--- /etc/httpd #custom acls find /etc/httpd -type d -exec chmod g+s {} \; setfacl -R -d -m g:root:rwX,o:r-- /etc/httpd/conf setfacl -R -d -m g:root:rwX,o:r-- /etc/httpd/conf.d setfacl -R -d -m g:root:rwX,o:r-- /etc/httpd/modsecurity.d setfacl -R -d -m g:root:rwX,o:r-- /etc/httpd/modsecurity.d/activated_rules setfacl -R -m g:domain-admisn:rwX /etc/httpd/conf setfacl -R -m g:domain-admins:rwX /etc/httpd/conf.d setfacl -R -m g:domain-admins:rwX /etc/httpd/modsecurity.d setfacl -R -m g:domain-admins:rwX /etc/httpd/modsecurity.d/activated_rules