httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Warren Beldad <advisor...@gmail.com>
Subject Re: [users@httpd] how can I serve pages while running as a root
Date Fri, 14 Oct 2005 11:32:17 GMT
what i did is, i really install new FC4 on another harddisk.
download apache_1.3.33.tar.gz
tar -xvzf apache_1.3.33.tar.gz
edit src/Configuration
EXTRA_CFLAGS=-DBIG_SECURITY_HOLE
 ./configure --prefix=/usr/local/apache --server-uid=root --server-gid=root
make
make install
/usr/local/apache/bin/apachectl start
cannot start, same error.....apache not designed to serve as root...........
if i change the user in the httpd.conf to another user, ok it can start
is there any log files that we can trace what's really wrong with this?
 thanks,
warren
 On 10/13/05, Joshua Slive <jslive@gmail.com> wrote:
>
> On 10/13/05, Warren Beldad <advisory22@gmail.com> wrote:
> > thanks for the help,
> > but still it doesn't work. I modify again the src/Configuration and
> rebuild
> > EXTRA_CFLAGS=-DBIG_SECURITY_HOLE
> > (actually the src/Configuration doesnt have the space before the equal,
> just
> > a typo error in my mail)
> > still I got the same error.
>
> Try starting with a fresh install (or, at minimum, starting with a
> "make clean").
>
> > I am creating a NAS like web, just like create users, create
> shares..etc...
> >
> > i have tried modifying the sudoers file but looks like it cannot really
> > perform what i'm expected. just like create user, you need to modify the
> > sudoers file permitting to execute useradd, but what about smbpasswd,
> the
> > shadow, etc...maybe i need more research on this.
> > but if i got the root running, then all my problems seems to be solve
> :-))
> > dont worry about the security, only the root still can access this.
> > I really need your help.
>
> Still a very bad idea. Apache is not designed to run as root, and
> doing so may create many unexpected security problems.
>
> Joshua.
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> " from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>
>

Mime
View raw message