Jump to content


Photo

Novice apache permisions question


  • Please log in to reply
1 reply to this topic

#1 applecup

applecup
  • New Members
  • Pip
  • Newbie
  • 1 posts

Posted 28 April 2003 - 03:38 AM

I believe there are two (if not more) levels of permission to run apache under. I think one is equivalent to anonymous or a very restricted user. I think the other is equivalent to root, running under sudo possibily? Can someone tell me what benefits are there to running under root, what benefits there are to running under anonymous and why you would choose one or the other.

#2 effigy

effigy
  • Staff Alumni
  • Advanced Member
  • 3,600 posts
  • LocationIL

Posted 29 April 2003 - 05:02 AM

i don\'t have an exact answer... the info escapes me... in any case -- running apache as root is not recommended at all. the dangers outweigh the advantages. apache running as root could do whatever it pleased with the system; one bug or one exploit and your system is toast. the benefits of running under a \"nobody\" type user: the user has no login to the system and very little rights; although, within the document root it is the big cheese and you are still flexible in that area. also, when coding the user will be denied access to important files and if you make a typo or are trying something out - you are still safe. you can always go in the system and chmod if need be or do some group shifting.
Regexp | Unicode Article | Letter Database
/\A(e)?((1)?ff(?:(?:ig)?y)?|f(?:ig)?)\z/




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users