[svlug] Configuring apache on Linux

[Ray Olszewski]

It will do; that is how all the Linux distributions I've looked at default
apache. nobody is a user with essentially no priveleges, so is a pretty safe
choice from a security standpoint.

I prefer, though, to create a user called www (with the same /etc/passwd
entries as nobody, except for uid and gid), and a group called web that www
is the only member of. This way, should I need to, I can allow limited
ability to write to files from cgi scripts fairly easily and safely.

PS -- For future postings to this list, you might want to reset your mailer
so it sends only the ascii version of your mesages, not the ascii version
followed by an html version of the same text.

At 05:28 AM 11/22/98 -0800, Matt Mouser wrote:
>Hi,
>
>I am new to Linux and I am not new to Apache. I was wondeirng what I should
run the apache server as if I am going to do webhosting. I mean what user? I
heard I am suppose to run the server as user nobody. Does this sound right?
[html deleted]

------------------------------------"Never tell me the odds!"---
Ray Olszewski                                        -- Han Solo
762 Garland Drive
Palo Alto, CA  94303-3603
650.321.3561 voice     650.322.1209 fax          ray at comarre.com        
----------------------------------------------------------------


--
echo "unsubscribe svlug" | mail majordomo at svlug.org
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ to unsubscribe
see http://www.svlug.org/mdstuff/lists.shtml for posting guidelines.