Re: [Devil-linux-develop] [ devil-linux-Bugs-826071 ] apache security

[Heiko Z. <he...@zu...>]

Bruce Smith wrote:

>>Initial Comment:
>>apache still runs as root, this needs to be fixed
>>    
>>
>
>Yes, should be user and group "apache".
>
user and group www
Those are already existing in DL.

>>can we get a common usable chroot working?
>>(could be a problem with all the libs we need)
>>    
>>
>
>The "home" (data) could be a problem too.
>It may not fit into a ram disk.
>May not be worth it ...
>
>  
>
>>anything else we can do?
>>    
>>
>
>Should probably create a logical volume for hard drive
>storage of the data.   /var/www/
>  
>
I think that's more a problem if the administrator.

cya
  Heiko