Re: An interface to Apache

On 23 Jun 1997 borud@guardian.no wrote:

> it should run as a different user than root AND a different user than

Agreed.

>
> the configuration server should under no circumstances run as root.

The problem is that if you can modify the config files, then in most setups (ie. where Apache is started by root) you can get root. As simple as that. Running the admin server as a non-root UID just adds another step to the process of getting root. Received on Mon Jun 23 11:15:22 1997