Date: Thu, 18 Oct 2001 16:01:53 +0400 From: "Andrey A. Chernov" <ache@nagual.pp.ru> To: Sheldon Hearn <sheldonh@starjuice.net> Cc: ports@freebsd.org, arch@freebsd.org Subject: Re: HEADS UP: Apache port change from nobody:nogroup to www:www planned Message-ID: <20011018160152.C63537@nagual.pp.ru> In-Reply-To: <28803.1003406442@axl.seasidesoftware.co.za> References: <20011018155749.A63537@nagual.pp.ru> <28803.1003406442@axl.seasidesoftware.co.za>
next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, Oct 18, 2001 at 14:00:42 +0200, Sheldon Hearn wrote: > > The gain is not running Apache with access priviledges it must not have, > > including read access. > > What files does user nobody have on files that user www won't? Nobody is NFS special. Www is not. > > Please also note that running non-wrapped write CGI's is not something > > illegal but the way officially documented in Apache, so it _will_ happens > > from time to time in anycase. > > In which case, what have you achieved? No wrong accesses in NFS case. -- Andrey A. Chernov http://ache.pp.ru/ To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-arch" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20011018160152.C63537>