Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 8 Apr 1997 11:25:51 +0800 (WST)
From:      Adrian Chadd <adrian@obiwan.aceonline.com.au>
To:        Antonio Nati <A.Nati@cisco.it>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: Apache and effective user id
Message-ID:  <Pine.BSF.3.95q.970408112518.4810A-100000@obiwan.aceonline.com.au>
In-Reply-To: <199704072353.BAA05709@cisco.it>

next in thread | previous in thread | raw e-mail | index | archive | help
Is the webserver running as root?

Cya

-- 
Adrian Chadd			| UNIX, MS-DOS and Windows ...
<adrian@psinet.net.au>		| (also known as the Good, the bad and the
				|				ugly..)


On Tue, 8 Apr 1997, Antonio Nati wrote:

> >> 
> >> I'm running apache, with user = nobody (= 65536).
> >
> >>From memory, FreeBSD uses 16-bit integers to hold userids, and so that
> >gives a valid range of UIDs of 0 .. 65535 inclusive. 65536 is 1 too much,
> >and so "overflows" and becomes 0 again. :)
> >
> 
> Sorry to make you lose time, but my nobody is 65534 (not 65536). Sorry, but
> I work with a dual-boot system and during the boots my memory (me, not the
> computer) loses something.
> 
> My production system runs with dedicated uid/gid, it's my stand-alone
> development system that has this problem.
> 
> Anyway, coming back to the original question, is it right to have
>         getuid = 65534
>         geteuid = 0
> in the execution of a cgi program?
> 
> Tonino
> 
> 




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.3.95q.970408112518.4810A-100000>