Re: [Devil-linux-develop] [ devil-linux-Bugs-826071 ] apache security

[Bruce S. <bw...@ar...>]

> Initial Comment:
> apache still runs as root, this needs to be fixed

Yes, should be user and group "apache".

> can we get a common usable chroot working?
> (could be a problem with all the libs we need)

The "home" (data) could be a problem too.
It may not fit into a ram disk.
May not be worth it ...

> anything else we can do?

Should probably create a logical volume for hard drive
storage of the data.   /var/www/

 - BS