Re: exploring debian's users and groups
On Tue, Aug 07, 2001 at 01:52:35PM -0500, Nathan E Norman wrote:
> Er, apache's logfiles are created as root since the master apache
> process runs as root. Children are spawned running as
> www-data:www-data, therefore no files should be owned by
> www-data:www-data unless you really want the webserver to be able to
> write to those files (some people do this with counters, guestbooks,
> etc. ... you have to be cautious though).
>
> Older debian installs set the apache logfiles to www-data:www-data ...
> this is wrong! www-data has no reason to write to the server
> logfiles. [hmm, I notice the machine I'm sending this email from has
somebody might want to start apache as non-root for security reasons
(I do). Logfiles owned by www-data come handy in this case.
--
-----------------------------------------------------------
| Radovan Garabik http://melkor.dnp.fmph.uniba.sk/~garabik/ |
| __..--^^^--..__ garabik @ melkor.dnp.fmph.uniba.sk |
-----------------------------------------------------------
Antivirus alert: file .signature infected by signature virus.
Hi! I'm a signature virus! Copy me into your signature file to help me spread!
Reply to: