Gentoo Archives: gentoo-dev

From: Gert Menke <gert@××××××××.net>
To: gentoo-dev@g.o
Subject: Re: [gentoo-dev] Gentoo observations
Date: Sun, 10 Mar 2002 08:26:06
Message-Id: 20020310142233.GB2332@mouse.mydomain
In Reply to: Re: [gentoo-dev] Gentoo observations by mrfab@arn.net
1 Hi,
2
3 On Sun, Mar 10, 2002 at 07:43:29AM -0600, mrfab@×××.net wrote:
4 > I'd hesitate to go for root:www because there is always that possibility
5 > that php or mod_perl or just developer error in a script could allow a
6 > web user to overwrite a file--and with root permissions that could be a
7 > disaster.
8 Oh, I'm sorry. I was talking about the files when I said root:www. My httpd
9 runs as nobody:www. Or are you talking about files with the SUID bit set?
10
11 Greetings
12 Gert

Replies

Subject Author
Re: [gentoo-dev] Gentoo observations mrfab@×××.net