[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: apache running as root?



PS> Hello,
PS> I am running Apache 1.3.9 and I am wondering, if this might be a
PS> security issue. There is always one Apache-process running as root.

PS> [..skip..]

>> From my point of understanding Apache starts as root and then switches
PS> to www-data. Ok, but does this mean, that a host might connect to the
PS> root-Apache? 

It is ok. It is main Apache process that is running as root. It only
starts new child proccess (those processes with www-data uid) that
process requests. Usually it happens only at start time but can happen
later if there are not enough child processes or server was
restarted. Main apache procces never processes requests itself.

-- 
 -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
| Ilya Martynov (http://martynov.org/)                                    |
| GnuPG 1024D/323BDEE6 D7F7 561E 4C1D 8A15 8E80  E4AE BE1A 53EB 323B DEE6 |
| AGAVA Software Company (http://www.agava.com/)                          |
 -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-



Reply to: