Woon Wai Keen @ doubleukay.com wrote:
#2 - ERUP (enhanced regular user privileges) http://www.wijata.com/erup and this one lets me grant the apache user (www-data) privilege to perform uid/gid switching , so that i dont have to run apache as root .
Ah....now I understand. First I thought this was meant as an alternative to diffprivs, but it seems to be essential to use it with it.
I will try this too. Please ignore my previous post. Yours Truly, Toni