From owner-freebsd-ports Thu Oct 18 3:48:58 2001 Delivered-To: freebsd-ports@freebsd.org Received: from axl.seasidesoftware.co.za (axl.seasidesoftware.co.za [196.31.7.201]) by hub.freebsd.org (Postfix) with ESMTP id E851837B407; Thu, 18 Oct 2001 03:48:51 -0700 (PDT) Received: from sheldonh (helo=axl.seasidesoftware.co.za) by axl.seasidesoftware.co.za with local-esmtp (Exim 3.33 #1) id 15uAjt-00075G-00; Thu, 18 Oct 2001 12:49:25 +0200 From: Sheldon Hearn To: "Andrey A. Chernov" Cc: ports@freebsd.org, arch@freebsd.org Subject: Re: HEADS UP: Apache port change from nobody:nogroup to www:www planned In-reply-to: Your message of "Thu, 18 Oct 2001 14:30:20 +0400." <20011018143019.A62250@nagual.pp.ru> Date: Thu, 18 Oct 2001 12:49:25 +0200 Message-ID: <27233.1003402165@axl.seasidesoftware.co.za> Sender: owner-freebsd-ports@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org On Thu, 18 Oct 2001 14:30:20 +0400, "Andrey A. Chernov" wrote: > > Hold on a second. What files does Apache _write_ as user nobody? > > Any file written from cgi-bin script f.e. Sheesh, I wish I'd seen this conversation happening before you committed your change. :-( The administrator has to create directories into which these cgi scripts can write files. By default, onlt /tmp is availabe, and it's pretty much okay for nobody to write into /tmp, given the goals of the nobody user. There are numerous ways of setting up CGI scripts so that they don't run as nobody. I think adding www:www to the system just for this was unnecessary. Ciao, Sheldon. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-ports" in the body of the message