Re: mod_perl and mysql
The web server runs as www-data but I have the mysql permissions
setup to use nobody for this database. Sounds like a good
suggestion. I will create a new user without login ability to assign write
permission to this db.
On 21 May 2003 at 14:45, Colin Watson wrote:
> On Wed, May 21, 2003 at 08:03:10AM -0500, John Basso wrote:
> > The web server is working, serves html content and
> provides access > control to the golf member portions. The
> problem I am having is that > when my mod_perl scripts try
> to access the database I get an > "access denied - no login
> provided" error message. > > I have given user "nobody"
> access permission to the golf db with no > password
> specified. (I assume this is ok as user "nobody" cannot log
> > into the machine).
>
> "nobody" should never be given write permission to any
> files; some daemons run as that user and you don't want a
> compromise there to affect more than it has to. Doesn't the
> web server run as "www-data" rather than "nobody"?
>
> Cheers,
>
> --
> Colin Watson
> [cjwatson@flatline.org.uk]
>
>
> --
> To UNSUBSCRIBE, email to
> debian-user-request@lists.debian.org with a subject of
> "unsubscribe". Trouble? Contact listmaster@lists.debian.org
John Basso
Raytheon Systems Company
256-722-4125
Reply to: