Date: Wed, 17 Oct 2001 15:42:15 -0400 (EDT) From: Kenneth W Cochran <kwc@world.std.com> To: josb@cncdsl.com Cc: cvs-all@freebsd.org Subject: Re: cvs commit: src/etc group master.passwd Message-ID: <200110171942.PAA27945@world.std.com>
next in thread | raw e-mail | index | archive | help
Ok... Just a suggestion anyway. As long as things are
documented, I have no really strong feelings either way. I
(& others :) think "separating" the webserver from other things
(in nobody:nogroup) is a Good Thing(tm). :)
The rationale I was thinking of is as follows:
1. user = program-name, group = service-name
2. User & group both different & "unique" within the system;
reason - faster & easier determination of "who" is doing "what"
(i.e. while pouring over system logs in the middle of the night
with insufficient caffiene-load... ;) "Hmmm, is that "user"-www
or "group"-www?" :)
The "beginning" of that rationale is the user:group choice for
named/bind. Currently, that is bind:bind. Under the "plan" I
mentioned, that might be something like "bind:dns" but whoever set
that up did so some time ago & probably for Very Good Reason...
Anyway, just a suggestion; www:www seems rather "customary"
anyway & I could live with that just fine, too.
-kc
>Date: Wed, 17 Oct 2001 11:00:55 -0701
>From: Jos Backus <josb@cncdsl.com>
>To: cvs-all@freebsd.org
>Subject: Re: cvs commit: /src/etc/ group master.passwd
>Reply-To: Jos Backus <josb@cncdsl.com>
>Mail-Followup-To: cvs-all@freebsd.org
>
>On Wed, Oct 17, 2001 at 10:35:43AM -0400, Kenneth W Cochran wrote:
>> I just now saw the commit adding www:www (80:80) to
>> /etc/{master.passwd,group}. Might I suggest consideration
>> that the Apache *user* be "apache," i.e. "apache:www (80:80)."
>
>I would argue against this: it should be the name of a service, not the name
>of a particular provider of that service.
>
>--
>Jos Backus _/ _/_/_/ Santa Clara, CA
> _/ _/ _/
> _/ _/_/_/
> _/ _/ _/ _/
>josb@cncdsl.com _/_/ _/_/_/ use Std::Disclaimer;
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200110171942.PAA27945>