| 1 |
I'd hesitate to go for root:www because there is |
| 2 |
always that possibility that php or mod_perl |
| 3 |
or just developer error in a script could allow |
| 4 |
a web user to overwrite a file--and with root |
| 5 |
permissions that could be a disaster. |
| 6 |
|
| 7 |
That user script sounds like a good idea. Any |
| 8 |
takers? :-) |
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
On Sun 10 Mar 2002 at 03:39 -0600, |
| 13 |
Gert Menke wrote: |
| 14 |
|
| 15 |
> Hi, |
| 16 |
> |
| 17 |
> On Sat, Mar 09, 2002 at 09:11:35PM -0600, mrfab@×××.net wrote: |
| 18 |
> > First, where the hell is vi? It is missing from |
| 19 |
> > both the boot image and the base install. I |
| 20 |
> > realize that I can emerge it, but having to use |
| 21 |
> > an editor as horrible as nano, even just for the |
| 22 |
> > initial config, was a bit obnoxious. |
| 23 |
> I could not agree more. |
| 24 |
> |
| 25 |
> > Another file system decision that seems |
| 26 |
> > off to me is the choice of /uar/local/httpd for the |
| 27 |
> > default documentroot instead of /var/www or |
| 28 |
> > something like /home/http. |
| 29 |
> I'd prefer /var/www or /var/apache. |
| 30 |
> /usr and /usr/local should at least be possible to mount read-only. |
| 31 |
> Usually you don't want your apache stuff on a ro partition. |
| 32 |
> /home/httpd just seems wrong to me, but I cannot excactly say why. Somehow |
| 33 |
> I feel that everyone that owns files on my /home partition should be a |
| 34 |
> "real" user (i.e. Humanoid)... ;-) |
| 35 |
> |
| 36 |
> > Speaking of apache, it would be better to use |
| 37 |
> > something other than nobody:nobody by default. |
| 38 |
> Yes; I got used to root:www. |
| 39 |
> |
| 40 |
> > I've noticed that a few distros (Redhat in |
| 41 |
> > particlular comes to mind) have modified useradd |
| 42 |
> > to create a personal group for a given user. |
| 43 |
> I don't like modified versions of standard tools. I'd rather have a script |
| 44 |
> that does the job for me, and has a different name (i.e. addusrgrp). |
| 45 |
> |
| 46 |
> Just my 0.02???. |
| 47 |
> |
| 48 |
> Greetings |
| 49 |
> Gert |
| 50 |
> _______________________________________________ |
| 51 |
> gentoo-dev mailing list |
| 52 |
> gentoo-dev@g.o |
| 53 |
> http://lists.gentoo.org/mailman/listinfo/gentoo-dev |
| 54 |
> |
| 55 |
> |
| 56 |
> |
| 57 |
> |
| 58 |
|
| 59 |
-- |
| 60 |
- Scott J Garner - |
| 61 |
- Austin, TX - USA - |
| 62 |
- ICQ: 17348307 AIM: Jungalero - |
| 63 |
- OPN: MrFab - |
Archives