From owner-freebsd-isp Fri Mar 22 18:28:39 2002 Delivered-To: freebsd-isp@freebsd.org Received: from cobra.acceleratedweb.net (cobra-gw.acceleratedweb.net [207.99.79.37]) by hub.freebsd.org (Postfix) with SMTP id D79AB37B404 for ; Fri, 22 Mar 2002 18:28:35 -0800 (PST) Received: (qmail 10100 invoked by uid 106); 23 Mar 2002 02:32:04 -0000 Received: from 24-90-123-214.nyc.rr.com (HELO station1) (24.90.123.214) by cobra.acceleratedweb.net with SMTP; 23 Mar 2002 02:32:04 -0000 From: "Simon" To: "freebsd-isp@freebsd.org" Date: Fri, 22 Mar 2002 21:34:28 -0500 Reply-To: "Simon" X-Mailer: PMMail 2000 Professional (2.10.2010) For Windows 2000 (5.0.2195) In-Reply-To: <002801c1d20c$42b9d500$3200a8c0@riker> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Subject: RE: Questions about Apache Message-Id: <20020323022835.D79AB37B404@hub.freebsd.org> Sender: owner-freebsd-isp@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Based on your reply about buffer overflow, one would infer that you're running it as root. On Sat, 23 Mar 2002 12:44:24 +1100, Alastair D'Silva wrote: >I don't, and I don't think I mentioned anywhere to do so :) > >The port by default runs as nobody/nogroup, but I prefer to make to make >a www:www user/group for it, since it is bad practice to have files >owned by nobody. > >-- >Alastair D'Silva B. Sc. mob: 0413 485 733 >Networking Consultant >New Millennium Networking http://www.newmillennium.net.au > >> -----Original Message----- >> From: Simon [mailto:simon@optinet.com] >> Sent: Saturday, 23 March 2002 10:05 AM >> To: Alastair D'Silva; Dave; freebsd-isp@freebsd.org >> Subject: RE: Questions about Apache >> >> >> >> Do not run your HTTPS daemon as root. >> >> On Sat, 23 Mar 2002 09:35:54 +1100, Alastair D'Silva wrote: > > >To Unsubscribe: send mail to majordomo@FreeBSD.org >with "unsubscribe freebsd-isp" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-isp" in the body of the message