[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Error with Apache MPM itk



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Wed, Mar 23, 2016 at 04:40:57PM +0100, Olivier Desport wrote:
> It's true that Apache is running under www-data group on Jessie :

[...]

> But on Wheezy, Apache is running under root, so I don't have to give
> execute access to the folder :

[...]

But that's what I am saying: just chgrp the folder to www-data; I asume
that the perms are 0750 -- voilà. The group *has* the necessary w+x
access. You don't have to give that to *all*.

By the way -- running Apache under root seems a bad idea. The least security
issue gives a potential attacker root! I can't imagine that this was the
default in Wheezy (actually I'm pretty sure it wasn't).

regards
- -- t
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)

iEYEARECAAYFAlby9xwACgkQBcgs9XrR2kbZNACdGol+oXiyWReIeHlafhG8tA4+
pIkAnAxZHR5zU8lM0ZcAR6NGdh5QgGcc
=OVq7
-----END PGP SIGNATURE-----


Reply to: