Ben has upped a patch to help poor SCO users set user and group in
httpd.conf
This is probably worth doing for all the platforms.
Ben's patch says,
# User/Group: The name (or #number) of the user/group to run httpd as.
! # On SCO (ODT 3) use User nouser and Group nogroup
User nobody
Group #-1
I was under the impression that it is better to encourage people to
setup a *new* user/group specifically for serving www. The admin at
Cardiff chose NOT to to use "nobody" because other applications were using
that user for other uses and there was potential conflict. This probably
isn't common, but it could be useful to write some comments around the
relevant config options to describe what the goal is - that of restricting
the privileges of the www processes.
Also, any other help on how to correctly configure the two (i.e. numeric
or positive numeric or name ...) would help newbies from digging a hole
for themselves. Too many people just skip those config setting because
they don't know how to configure them correctly, and then come crying to
us for help.. often after a silent core dump.
rob
httpd.conf
This is probably worth doing for all the platforms.
Ben's patch says,
# User/Group: The name (or #number) of the user/group to run httpd as.
! # On SCO (ODT 3) use User nouser and Group nogroup
User nobody
Group #-1
I was under the impression that it is better to encourage people to
setup a *new* user/group specifically for serving www. The admin at
Cardiff chose NOT to to use "nobody" because other applications were using
that user for other uses and there was potential conflict. This probably
isn't common, but it could be useful to write some comments around the
relevant config options to describe what the goal is - that of restricting
the privileges of the www processes.
Also, any other help on how to correctly configure the two (i.e. numeric
or positive numeric or name ...) would help newbies from digging a hole
for themselves. Too many people just skip those config setting because
they don't know how to configure them correctly, and then come crying to
us for help.. often after a silent core dump.
rob