From owner-freebsd-ports  Thu Oct 18  4:49:29 2001
Delivered-To: freebsd-ports@freebsd.org
Received: from axl.seasidesoftware.co.za (axl.seasidesoftware.co.za [196.31.7.201])
	by hub.freebsd.org (Postfix) with ESMTP id 9C6D637B401
	for <ports@freebsd.org>; Thu, 18 Oct 2001 04:49:27 -0700 (PDT)
Received: from sheldonh (helo=axl.seasidesoftware.co.za)
	by axl.seasidesoftware.co.za with local-esmtp (Exim 3.33 #1)
	id 15uBgI-0007QX-00; Thu, 18 Oct 2001 13:49:46 +0200
From: Sheldon Hearn <sheldonh@starjuice.net>
To: "Andrey A. Chernov" <ache@nagual.pp.ru>
Cc: Yarema <yds@dppl.com>, ports@FreeBSD.org
Subject: Re: HEADS UP: Apache port change from nobody:nogroup to www:www planned 
In-reply-to: Your message of "Thu, 18 Oct 2001 15:43:06 +0400."
             <20011018154306.C63215@nagual.pp.ru> 
Date: Thu, 18 Oct 2001 13:49:46 +0200
Message-ID: <28552.1003405786@axl.seasidesoftware.co.za>
Sender: owner-freebsd-ports@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-ports.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-ports>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-ports>
X-Loop: FreeBSD.org



On Thu, 18 Oct 2001 15:43:06 +0400, "Andrey A. Chernov" wrote:

> > Apache is not abusing nobody:nogroup -- users who don't configure their CGI 
> > environment are.   The Right Thing is to run CGIs via suexec. 
> 
> No, Apache abuses nobody just running under it. It gains to it access
> priveledges it must not have.

Now you've TOTALLY lost me.  You're saying processes shouldn't be run as
nobody? :-)

> > suexec works better if apache does run as nobody:nogroup.  
> 
> No. suexec works equally for any user/group.

Exactly. :-)

Ciao,
Sheldon.

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-ports" in the body of the message