*BSD News Article 75957


Return to BSD News archive

Path: euryale.cc.adfa.oz.au!newshost.carno.net.au!harbinger.cc.monash.edu.au!munnari.OZ.AU!news.ecn.uoknor.edu!news.wildstar.net!newsfeed.direct.ca!hunter.premier.net!newsfeed.internetmci.com!in3.uu.net!EU.net!main.Germany.EU.net!Dortmund.Germany.EU.net!interface-business.de!usenet
From: j@ida.interface-business.de (J Wunsch)
Newsgroups: comp.unix.bsd.bsdi.misc
Subject: Re: apache ownerships
Date: 12 Aug 1996 08:44:51 GMT
Organization: interface business GmbH, Dresden
Lines: 19
Message-ID: <4umqu3$i04@innocence.interface-business.de>
References: <4ugdct$bft@moon.igcom.net>
Reply-To: joerg_wunsch@interface-business.de (Joerg Wunsch)
NNTP-Posting-Host: ida.interface-business.de
X-Newsreader: knews 0.9.6
X-Phone: +49-351-31809-14
X-Fax: +49-351-3361187
X-PGP-Fingerprint: DC 47 E6 E4 FF A6 E9 8F  93 21 E0 7D F9 12 D6 4E

david@terra.igcom.net (David B. Bauman) wrote:

> I have a slight problem with apache.  The first httpd process is ALWAYS
> owned by root, even if I change the ownerships in the httpd.conf
> configuration file.  Is there any way to make *ALL* httpd processes owned
> by who I define for USER/GROUP in the httpd.conf file?

I don't think so.  This is something like a master process, it doesn't
access data files itself, but has to access the configuration files
etc., which might be protected against reading for the world.  (Or how
should it re-read the config file after a SIGHUP?)

As i understand it, all data file access happens through the setuid'ed
children.

-- 
J"org Wunsch					       Unix support engineer
joerg_wunsch@interface-business.de       http://www.interface-business.de/~j