httpd-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Rob Hartill <hart...@ooo.lanl.gov>
Subject 06_SCODocFix patch
Date Mon, 25 Sep 1995 13:13:38 GMT


Ben has upped a patch to help poor SCO users set user and group in 
httpd.conf

This is probably worth doing for all the platforms.

Ben's patch says,

  # User/Group: The name (or #number) of the user/group to run httpd as.
! #  On SCO (ODT 3) use User nouser and Group nogroup
  User nobody
  Group #-1



I was under the impression that it is better to encourage people to
setup a *new* user/group specifically for serving www. The admin at
Cardiff chose NOT to to use "nobody" because other applications were using
that user for other uses and there was potential conflict. This probably 
isn't common, but it could be useful to write some comments around the 
relevant config options to describe what the goal is - that of restricting 
the privileges of the www processes.

Also, any other help on how to correctly configure the two (i.e. numeric
or positive numeric or name ...) would help newbies from digging a hole
for themselves. Too many people just skip those config setting because
they don't know how to configure them correctly, and then come crying to
us for help.. often after a silent core dump.


rob

Mime
View raw message