From owner-freebsd-questions Sun Jul 4 14:32:24 1999 Delivered-To: freebsd-questions@freebsd.org Received: from mta2-rme.xtra.co.nz (unknown [203.96.92.3]) by hub.freebsd.org (Postfix) with ESMTP id C47B6155FA for ; Sun, 4 Jul 1999 14:32:17 -0700 (PDT) (envelope-from junkmale@pop3.xtra.co.nz) Received: from wocker ([210.55.152.47]) by mta2-rme.xtra.co.nz (InterMail v4.01.01.00 201-229-111) with SMTP id <19990704213504.GDNY112692.mta2-rme@wocker>; Mon, 5 Jul 1999 09:35:04 +1200 From: "Dan Langille" Organization: The FreeBSD Diary To: Jonathon Doran Date: Mon, 5 Jul 1999 09:32:15 +1200 MIME-Version: 1.0 Content-type: text/plain; charset=US-ASCII Content-transfer-encoding: 7BIT Subject: Re: Use of user nobody Reply-To: junkmale@xtra.co.nz Cc: questions@FreeBSD.ORG In-reply-to: <199907041724.LAA05763@ucsu.Colorado.EDU> References: <199907040824.EAA27272@arutam.inch.com> from "Francisco Reyes" at Jul 4, 99 04:25:41 am X-mailer: Pegasus Mail for Win32 (v3.01d) Message-Id: <19990704213504.GDNY112692.mta2-rme@wocker> Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On 4 Jul 99, at 11:24, Jonathon Doran wrote: > > Recently I installed Squid based on the instructions in an article at > > freebsdezine.com Two of the steps involved changing the owners of > > directories/files to "nobody". > > > > Is this safe? What does it mean? > > Yes, it is safe. > > > Anything special about this user? > > This user has no privilages, can't login, has an invalid password, and > doesn't belong to any group. This limits the ability to exploit bugs in > programs running as "nobody". There is otherwise, nothing special about > nobody. Given the above, I recall reading somewhere that it's better to create a separate user for apache (such as http). Any logic behind that reasoning? -- Dan Langille - DVL Software Limited The FreeBSD Diary - http://www.FreeBSDDiary.org/freebsd/ NZ FreeBSD User Group - http://www.nzfug.nz.freebsd.org/ The Racing System - http://www.racingsystem.com/racingsystem.htm To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message