Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 18 Oct 2001 14:00:42 +0200
From:      Sheldon Hearn <sheldonh@starjuice.net>
To:        "Andrey A. Chernov" <ache@nagual.pp.ru>
Cc:        ports@freebsd.org, arch@freebsd.org
Subject:   Re: HEADS UP: Apache port change from nobody:nogroup to www:www planned 
Message-ID:  <28803.1003406442@axl.seasidesoftware.co.za>
In-Reply-To: Your message of "Thu, 18 Oct 2001 15:57:50 %2B0400." <20011018155749.A63537@nagual.pp.ru> 

next in thread | previous in thread | raw e-mail | index | archive | help


On Thu, 18 Oct 2001 15:57:50 +0400, "Andrey A. Chernov" wrote:

> The gain is not running Apache with access priviledges it must not have, 
> including read access.

What files does user nobody have on files that user www won't?

> Please also note that running non-wrapped write CGI's is not something
> illegal but the way officially documented in Apache, so it _will_ happens
> from time to time in anycase.

In which case, what have you achieved?

Ciao,
Sheldon.

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-ports" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?28803.1003406442>