From owner-freebsd-questions Wed Jul 28 7:41:47 1999 Delivered-To: freebsd-questions@freebsd.org Received: from sasknow.com (h139-142-245-96.ss.FiberONE.NET [139.142.245.96]) by hub.freebsd.org (Postfix) with ESMTP id A814415489 for ; Wed, 28 Jul 1999 07:41:45 -0700 (PDT) (envelope-from freebsd@sasknow.com) Received: from localhost (freebsd@localhost) by sasknow.com (8.9.3/8.9.3) with ESMTP id IAA00760; Wed, 28 Jul 1999 08:40:01 GMT (envelope-from freebsd@sasknow.com) Date: Wed, 28 Jul 1999 08:40:00 +0000 (GMT) From: Ryan Thompson To: "Andy V. Oleynik" Cc: freebsd-questions@FreeBSD.ORG Subject: Re: Samba security questions In-Reply-To: <379EE887.277B4E7@prime.net.ua> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=X-UNKNOWN Content-Transfer-Encoding: QUOTED-PRINTABLE Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Wed, 28 Jul 1999, Andy V. Oleynik wrote: > Ryan Thompson wrote: > > all the files in my Apache server root :-) Instead, I've done a chown > > nobody and left the access permissions alone. >=20 > Bad idea. Somehow, Andy, I think I new that. I bet I just chose not to believe it :-) > > My question... Is there any real or implied security risk inherent in > > having all www data owned by nobody, as far as Apache is concerned? > > >=20 > web tree must be owned by root but the few subtrees which can be owned by > real users on ur host to allow them update their pages if latter are plac= ed > in web tree. >=20 > WBW Andy V. Oleynik (When U work in virtual office > prime.net.ua's U have good chance to obtain > system administrator virtual money =F6%-) > +380442448363 >=20 So, we return to my original question (which, now that I look back on it, seems to have faded into obscurity somewhere in my last message)... How can I enable Samba to run itself as a priviliged user when connections are made? Doing so would eliminate a lot of grief on my end, that's for sure :) I'm not just concerned about the web tree.. It would be nice to have access to ALL files on the server from my other machine. Virtually yours, Ryan Thompson To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message