From owner-freebsd-questions Wed Jul 28 8:37:10 1999 Delivered-To: freebsd-questions@freebsd.org Received: from volodya.prime.net.ua (volodya.prime.net.ua [195.64.229.17]) by hub.freebsd.org (Postfix) with ESMTP id DB438154BB for ; Wed, 28 Jul 1999 08:37:04 -0700 (PDT) (envelope-from andyo@prime.net.ua) Received: from prime.net.ua (localhost [127.0.0.1]) by volodya.prime.net.ua (8.9.3/8.8.8) with ESMTP id SAA01101; Wed, 28 Jul 1999 18:35:57 +0300 (EEST) (envelope-from andyo@prime.net.ua) Message-ID: <379F235C.17786C4@prime.net.ua> Date: Wed, 28 Jul 1999 18:35:56 +0300 From: "Andy V. Oleynik" Organization: M-Info X-Mailer: Mozilla 4.61 [en] (X11; I; FreeBSD 3.2-STABLE i386) X-Accept-Language: en, ru, uk MIME-Version: 1.0 To: Ryan Thompson Cc: freebsd-questions@FreeBSD.ORG Subject: Re: Samba security questions References: Content-Type: text/plain; charset=koi8-r Content-Transfer-Encoding: 8bit Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG Ryan Thompson wrote: > On Wed, 28 Jul 1999, Andy V. Oleynik wrote: > > Ryan Thompson wrote: > > > all the files in my Apache server root :-) Instead, I've done a chown > > > nobody and left the access permissions alone. > > > > Bad idea. > > Somehow, Andy, I think I new that. I bet I just chose not to believe it > :-) > > > > My question... Is there any real or implied security risk inherent in > > > having all www data owned by nobody, as far as Apache is concerned? > > > > > > > web tree must be owned by root but the few subtrees which can be owned by > > real users on ur host to allow them update their pages if latter are placed > > in web tree. > > > > WBW Andy V. Oleynik (When U work in virtual office > > prime.net.ua's U have good chance to obtain > > system administrator virtual money ö%-) > > +380442448363 > > > > So, we return to my original question (which, now that I look back on it, > seems to have faded into obscurity somewhere in my last message)... How > can I enable Samba to run itself as a priviliged user when connections are > made? Doing so would eliminate a lot of grief on my end, that's for sure > :) I'm not just concerned about the web tree.. It would be nice to have > access to ALL files on the server from my other machine. > To run samba as root just run smbd/nmbd from the startup scripts in standalone mode. Also U have to connect to ur shares as registered on samba-host user. man 5 smb.conf. > > Virtually yours, > Ryan Thompson -- WBW Andy V. Oleynik (When U work in virtual office prime.net.ua's U have good chance to obtain system administrator virtual money ö%-) +380442448363 To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message