slr wrote: >
> no apache is run as root. and for some reason the user for logrotate is
> trying to access the root profile, and this may be happening because root
> starts apache.
If this is true, then it is really bad to run httpd as root. This gives
a CGI full access to the system.
On Debian in my /etc/apache/httpd.conf
# If you wish httpd to run as a different user or group, you must run
# httpd as root initially and it will switch.
# User/Group: The name (or #number) of the user/group to run httpd as.
# On SCO (ODT 3) use User nouser and Group nogroup
# On HPUX you may not be able to use shared memory as nobody, and the
# suggested workaround is to create a user www and use that user.
(text/plain)