From owner-freebsd-ports  Thu Oct 18  4:43:13 2001
Delivered-To: freebsd-ports@freebsd.org
Received: from nagual.pp.ru (pobrecita.freebsd.ru [194.87.13.42])
	by hub.freebsd.org (Postfix) with ESMTP id 07FA637B403
	for <ports@FreeBSD.org>; Thu, 18 Oct 2001 04:43:11 -0700 (PDT)
Received: (from ache@localhost)
	by nagual.pp.ru (8.11.6/8.11.6) id f9IBh6I63410;
	Thu, 18 Oct 2001 15:43:06 +0400 (MSD)
	(envelope-from ache)
Date: Thu, 18 Oct 2001 15:43:06 +0400
From: "Andrey A. Chernov" <ache@nagual.pp.ru>
To: Yarema <yds@dppl.com>
Cc: ports@FreeBSD.org, Sheldon Hearn <sheldonh@starjuice.net>
Subject: Re: HEADS UP: Apache port change from nobody:nogroup to www:www planned
Message-ID: <20011018154306.C63215@nagual.pp.ru>
References: <20011018110513.C38731B3B0@volyn.dppl.net>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <20011018110513.C38731B3B0@volyn.dppl.net>
User-Agent: Mutt/1.3.23i
Sender: owner-freebsd-ports@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-ports.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-ports>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-ports>
X-Loop: FreeBSD.org

On Thu, Oct 18, 2001 at 07:05:11 -0400, Yarema wrote:

> Apache is not abusing nobody:nogroup -- users who don't configure their CGI 
> environment are.   The Right Thing is to run CGIs via suexec. 

No, Apache abuses nobody just running under it. It gains to it access
priveledges it must not have.

> suexec works better if apache does run as nobody:nogroup.  

No. suexec works equally for any user/group.

-- 
Andrey A. Chernov
http://ache.pp.ru/

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-ports" in the body of the message