Re: [Devil-linux-develop] [ devil-linux-Bugs-826071 ] apache security

[Bruce S. <bw...@ar...>]

> >>apache still runs as root, this needs to be fixed
> >
> >Yes, should be user and group "apache".
> >
> user and group www
> Those are already existing in DL.

OK, most other distros use "apache", but it doesn't really matter.
I think all that is required is a couple lines in the config file:

User www
Group www

> >Should probably create a logical volume for hard drive
> >storage of the data.   /var/www/
> >
> I think that's more a problem if the administrator.

Huh?  I'm not following you (or maybe you're not following me? :)

I'm talking about creating a LV name to store the Apache web site.
http://www.devil-linux.org/newdoc/ch01s04.html#d0e568

Do you want to reuse one of other names, like /var/data ?

Most distros store it in /var/www .

 - BS