From owner-freebsd-questions@FreeBSD.ORG Mon Aug 22 17:24:30 2011 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 3B0891065674 for ; Mon, 22 Aug 2011 17:24:30 +0000 (UTC) (envelope-from dick@nagual.nl) Received: from smtpq1.tb.mail.iss.as9143.net (smtpq1.tb.mail.iss.as9143.net [212.54.42.164]) by mx1.freebsd.org (Postfix) with ESMTP id EA1AA8FC22 for ; Mon, 22 Aug 2011 17:24:29 +0000 (UTC) Received: from [212.54.42.145] (helo=smtp14.tb.mail.iss.as9143.net) by smtpq1.tb.mail.iss.as9143.net with esmtp (Exim 4.71) (envelope-from ) id 1QvYEe-0007L6-CF for freebsd-questions@freebsd.org; Mon, 22 Aug 2011 19:24:28 +0200 Received: from 524944af.cm-4-2b.dynamic.ziggo.nl ([82.73.68.175] helo=mail.nagual.nl) by smtp14.tb.mail.iss.as9143.net with esmtp (Exim 4.71) (envelope-from ) id 1QvYEd-0003s3-7K for freebsd-questions@freebsd.org; Mon, 22 Aug 2011 19:24:27 +0200 Received: from [192.168.11.34] (192.168.11.34) by yanta (Axigen) with (CAMELLIA256-SHA encrypted) ESMTPSA id 3A8363; Mon, 22 Aug 2011 19:25:26 +0200 Message-ID: <4E5290CD.6000107@nagual.nl> Date: Mon, 22 Aug 2011 19:24:29 +0200 From: Dick Hoogendijk User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:6.0) Gecko/20110812 Thunderbird/6.0 MIME-Version: 1.0 To: freebsd-questions@freebsd.org Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-AxigenSpam-Level: 4 X-ZiggoSMTP-MailScanner-Information: Please contact the ISP for more information X-ZiggoSMTP-MailScanner-ID: 1QvYEd-0003s3-7K X-ZiggoSMTP-MailScanner: Found to be clean X-ZiggoSMTP-MailScanner-SpamCheck: geen spam, SpamAssassin (niet cached, score=3.052, vereist 5, BAYES_20 -0.00, CM_META_TB_NOARR 0.50, FH_HOST_EQ_D_D_D_D 0.67, KHOP_DYNAMIC 0.91, RDNS_DYNAMIC 0.98) X-ZiggoSMTP-MailScanner-SpamScore: sss X-ZiggoSMTP-MailScanner-From: dick@nagual.nl X-Spam-Status: No Subject: drupal7 port X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 22 Aug 2011 17:24:30 -0000 I installed the drupal7 port but noticed that the webserver root (the drupal core files) were *all* owned by www:www Isn't this an enormous security risk to have apache being able to write in the core directorues of drupal7?