httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "M.D. DeWar" <m...@s-wit.net>
Subject Re: [users@httpd] user/group setup for files in document and cgi dirs
Date Fri, 14 Nov 2003 18:29:01 GMT
Thanks.
one quickie.
Since its alreayd installed and running will doing the chmod/chown it
suggest cuz me problems with already running programs/services etc ?

thanks
mark
----- Original Message ----- 
From: "Joshua Slive" <joshua@slive.ca>
To: <users@httpd.apache.org>
Sent: Friday, November 14, 2003 12:23 PM
Subject: Re: [users@httpd] user/group setup for files in document and cgi
dirs


>
> On Fri, 14 Nov 2003, Luis Gallegos wrote:
>
> > You wrote:
> > Should those files be run as nobody.nobody also ?
> >
> > The files in the cgi-bin directory can be from any owner, but it is
> > better that they be from nobody.
>
> I disagree on that.  If they are owned by nobody, then if somebody
> compromises the web server, they could modify these files.
>
> The safest thing is for them to be owned by root with only read/execute
> permission for group/other.  See:
> http://httpd.apache.org/docs-2.0/misc/security_tips.html#serverroot
>
> Joshua.
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>    "   from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>
>



---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Mime
View raw message