Re: [mod-security-users] Re: Using SecChrootDir Directive

[Ryan B. <rcb...@gm...>]

The error message in the logs most likely indicates that the apache
process is reading the chrooted httpd.conf file (which has the 'User
nobody' directive set) and is checking this against the chrooted
/etc/passwd file (which most likely does not not have an entry for the
'nobody' account).

Try and trace/strace your apachectl command to verify which files it
is accessing -

# strace -f -e trace=3Dopen /usr/local/sbin/apachectl graceful

--=20
Ryan C. Barnett
Web Application Security Consortium (WASC) Member
SANS Instructor: Securing Apache
GCIA, GCFA, GCIH, GCUX, GSEC


On 6/2/05, peceka <pe...@gm...> wrote:
> Hi Ivan,
>=20
> >
> >   Everything else can remain outside jail but there are consequences
> >   (e.g. you won't be able to restart Apache, just stop-start it).
> >
>=20
> Why i'm not able to restart Apache?
> When using /usr/local/sbin/apachectl graceful
>=20
> All httpd processes die and in logs i've got:
> httpd: bad user name nobody
>=20
>=20
> But in httpd.conf:
> User www
> Group www
>=20
>=20
> TIA
>=20
> p.
>=20
>=20
>=20
> -------------------------------------------------------
> This SF.Net email is sponsored by Yahoo.
> Introducing Yahoo! Search Developer Network - Create apps using Yahoo!
> Search APIs Find out how you can build Yahoo! directly into your own
> Applications - visit http://developer.yahoo.net/?fr=3Doffad-ysdn-ostg-q22=
005
> _______________________________________________
> mod-security-users mailing list
> mod...@li...
> https://lists.sourceforge.net/lists/listinfo/mod-security-users
>