Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 13 Mar 2002 22:31:04 -0500
From:      Pete Fritchman <petef@databits.net>
To:        Patrick Fish <patrick@pwhsnet.com>
Cc:        freebsd-isp@FreeBSD.ORG
Subject:   Re: apache question
Message-ID:  <20020313223104.B83337@databits.net>
In-Reply-To: <000e01c1cb06$d6a47930$0300a8c0@zeus>; from patrick@pwhsnet.com on Wed, Mar 13, 2002 at 07:17:56PM -0800
References:  <000e01c1cb06$d6a47930$0300a8c0@zeus>

next in thread | previous in thread | raw e-mail | index | archive | help
++ 13/03/02 19:17 -0800 - Patrick Fish:
| -----BEGIN PGP SIGNED MESSAGE-----
| Hash: SHA1
| 
| I'm converting all virt hosts i host to run under the username that
| owns the website.  I'm having some trouble with that...
| it looks like this:
| 
| <VirtualHost *>
| DocumentRoot /home/brendyn/public_html
| ServerName www.omvis.net
| User brendyn
| Group brendyn
| RLimitNPROC 5 8
| ServerAlias omvis.net
| </VirtualHost>
| 
| I restart apache, and it still runs under nobody.
| Im running apache version Apache/1.3.20

This is correct -- the actual apache processes will run under whatever
user they're configured to run under in httpd.conf, but user cgi scripts
will be executed as the user.  Try it... put something in the cgi-bin
that does "touch /tmp/suexectest" and notice which user owns that file.

--pete

--
Pete Fritchman [petef@(databits.net|freebsd.org|csh.rit.edu)]
finger petef@databits.net for PGP key

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020313223104.B83337>