[bug-notifications] [apache2 0003930]: Use same user/group as Sun apache2 package

Mantis Bug Tracker noreply at opencsw.org
Wed Sep 30 12:07:31 CEST 2009


The following issue has been SUBMITTED. 
====================================================================== 
http://www.opencsw.org/bugtrack/view.php?id=3930 
====================================================================== 
Reported By:                alexs77
Assigned To:                
====================================================================== 
Project:                    apache2
Issue ID:                   3930
Category:                   packaging
Reproducibility:            N/A
Severity:                   tweak
Priority:                   normal
Status:                     new
====================================================================== 
Date Submitted:             2009-09-30 12:07 CEST
Last Modified:              2009-09-30 12:07 CEST
====================================================================== 
Summary:                    Use same user/group as Sun apache2 package
Description: 
CSWapache2 uses the User nobody and Group nobody to run the httpd. Sun
apache2 (at least on Solaris 10) uses a dedicated user/group webservd.
That's better, because the user can thus be limited in rights even more (or
maybe the other way around: that user can be easily given more rights).
Especially when granting additional rights, that's something you do of
course *NOT* want to do when a "generic" user/group like "nobody" is used.

Because of that, it would be good, if CSW would follow what Sun does, as
it makes a lot of sense: Please use User webservd and Group webservd.
======================================================================




More information about the bug-notifications mailing list