You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by Jeffrey Hellem <th...@phildowd.com> on 2003/01/14 21:21:33 UTC

[users@httpd] Had someone tell me this was a bad idea

I'm just looking for input from peoples.

My server:

Server Version: Apache/2.0.43 (Unix) mod_perl/1.99_07-dev Perl/v5.8.0
mod_ssl/2.0.43 OpenSSL/0.9.7 DAV/2 PHP/4.3.0
mod_fastcgi/mod_fastcgi-SNAP-0212222223 mod_python/3.0.1 Python/2.2.2
Server Built: Jan 1 2003 08:48:40
API Version: 20020903:0
Hostname/port: removed.for.privacy
Timeouts: connection: 300    keep-alive: 300
MPM Name: Worker
MPM Information: Max Daemons: 9 Threaded: yes Forked: yes
Server Root: /usr
Config File: /etc/apache/httpd.conf

I've been told this "Shouldn't work" "should segfault on startup" can anyone
explain why?

also

Can anyone tell me why my content shouldn't be owned by the same user as
apache ?

thanks


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

Re: [users@httpd] Had someone tell me this was a bad idea

Posted by Joshua Slive <jo...@slive.ca>.
On Tue, 14 Jan 2003, Jeffrey Hellem wrote:
>
> I've been told this "Shouldn't work" "should segfault on startup" can anyone
> explain why?

You should ask the person who told you that for more details.  Certainly,
you may run into trouble if one or more of the libraries that you are
using is non-threadsafe, since you are using a threaded mpm.

> Can anyone tell me why my content shouldn't be owned by the same user as
> apache ?

Because a security breach (say, a faulty cgi script) could then allow your
files to be overwritten from the web.

Joshua.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org