How to Secure User Accounts in Shared Hosting Environment
Create a dedicated user/group for running LiteSpeed Web Server, for example like “lsws/lsws”. Reinstall LSWS if needed. There might be other services running as user “nobody”, it is better to set up a dedicated user account for LSWS. This account should have login shell disabled, same as “nobody”.
usermod -a -G group1 lsws
usermod -a -G group2 lsws
/etc/group should likes like:
chmod 0770 /home/user1
Make sure to use suEXEC
for all virtual hosts, all CGI/FCGI/PHP/LSAPI applications/scripts will be executed under the user account of the web site owner.