Re: [Devil-linux-develop] [ devil-linux-Bugs-826071 ] apache security

[Heiko Z. <hz...@pr...>]

On 10/20/2003 09:55:58 AM Bruce Smith wrote:
>> >>apache still runs as root, this needs to be fixed
>> >
>> >Yes, should be user and group "apache".
>> >
>> user and group www
>> Those are already existing in DL.
>
>OK, most other distros use "apache", but it doesn't really matter.
>I think all that is required is a couple lines in the config file:
>
>User www
>Group www

That would be to easy...

>> >Should probably create a logical volume for hard drive
>> >storage of the data.   /var/www/
>> >
>> I think that's more a problem if the administrator.
>
>Huh?  I'm not following you (or maybe you're not following me? :)
>
>I'm talking about creating a LV name to store the Apache web site.
>http://www.devil-linux.org/newdoc/ch01s04.html#d0e568
>
>Do you want to reuse one of other names, like /var/data ?

Yeah I thought something like /var/data/www
But that would be up to the Administrator who's setting up the machine.=


>Most distros store it in /var/www .

Then go ahead and to it. ;-)

Heiko
=