[Devil-linux-develop] [ devil-linux-Bugs-826071 ] apache security

[SourceForge.net <no...@so...>]

Bugs item #826071, was opened at 2003-10-18 13:30
Message generated for change (Comment added) made by smiley73
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=410643&aid=826071&group_id=34096

Category: Package
Group: None
Status: Open
Resolution: None
Priority: 5
Submitted By: Heiko Zuerker (smiley73)
Assigned to: Nobody/Anonymous (nobody)
Summary: apache security

Initial Comment:
apache still runs as root, this needs to be fixed

can we get a common usable chroot working?
(could be a problem with all the libs we need)

anything else we can do?


----------------------------------------------------------------------

>Comment By: Heiko Zuerker (smiley73)
Date: 2003-10-21 11:46

Message:
Logged In: YES 
user_id=112133

remove the "user nobody" part and add
user www
group www

to /etc/apache2/httpd.conf

----------------------------------------------------------------------

Comment By: Bruce Smith (blubdog)
Date: 2003-10-19 08:01

Message:
Logged In: YES 
user_id=778609

We should also create a logical volume for hard drive
storage of the home/data/web-site:  /var/www


----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=410643&aid=826071&group_id=34096