[PLUG]apache 1.3.12

gnomeboy plug-discuss@lists.PLUG.phoenix.az.us
Thu, 12 Jul 2001 16:11:02 -0700


the parent is root, all children are

User apache
Group apache

----- Original Message -----
From: "Eric Richardson" <eric@milagrosoft.com>
To: <plug-discuss@lists.PLUG.phoenix.az.us>
Sent: Thursday, July 12, 2001 8:39 AM
Subject: Re: [PLUG]apache 1.3.12


> slr wrote:
> >
> > no apache is run  as root.  and for some reason the user for logrotate
is
> > trying to access the root profile, and this may be happening because
root
> > starts apache.
>
> If this is true, then it is really bad to run httpd as root. This gives
> a CGI full access to the system.
>
> On Debian in my /etc/apache/httpd.conf
>
> # If you wish httpd to run as a different user or group, you must run
> # httpd as root initially and it will switch.
>
> # User/Group: The name (or #number) of the user/group to run httpd as.
> #  On SCO (ODT 3) use User nouser and Group nogroup
> #  On HPUX you may not be able to use shared memory as nobody, and the
> #  suggested workaround is to create a user www and use that user.
>
> User www-data
> Group www-data
>
> Hope this helps,
> Eric
> ________________________________________________
> See http://PLUG.phoenix.az.us/navigator-mail.shtml if your mail doesn't
post to the list quickly and you use Netscape to write mail.
>
> PLUG-discuss mailing list  -  PLUG-discuss@lists.PLUG.phoenix.az.us
> http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
>