12 Mar
2008
12 Mar
'08
2:12 p.m.
Chris G cl@isbd.net wrote:
Would running apache as myself cause any serious security or other issues? (apache 2.2 on Fedora 8 if it's of any significance) [...]
An exploit of apache could wipe out your files. Seems serious to me if the apache is world-visible.
Alternatively can anyone suggest a scriptable way of allowing myself to become user apache so that I can create files, do fuse mounts, etc. as apache?
sudo, or careful use of group ownerships (chgrp) and permissions (chmod g+rx). Alternatively, consider using suexec or mod_ruid to apache run *some* tasks as your user.
Hope that helps,
--
MJ Ray http://mjr.towers.org.uk/email.html tel:+44-844-4437-237 -
Webmaster-developer, statistician, sysadmin, online shop builder,
consumer and workers co-operative member http://www.ttllp.co.uk/ -
Writing on koha, debian, sat TV, Kewstoke http://mjr.towers.org.uk/