[bug-notifications] [apache2 0003930]: Use same user/group as Sun apache2 package

Mantis Bug Tracker noreply at opencsw.org
Wed Sep 7 02:39:50 CEST 2011


The following issue has been CLOSED 
====================================================================== 
https://www.opencsw.org/mantis/view.php?id=3930 
====================================================================== 
Reported By:                alexs77
Assigned To:                bwalton
====================================================================== 
Project:                    apache2
Issue ID:                   3930
Category:                   packaging
Reproducibility:            N/A
Severity:                   tweak
Priority:                   normal
Status:                     closed
Resolution:                 open
Fixed in Version:           
====================================================================== 
Date Submitted:             2009-09-30 12:07 CEST
Last Modified:              2011-09-07 02:39 CEST
====================================================================== 
Summary:                    Use same user/group as Sun apache2 package
Description: 
CSWapache2 uses the User nobody and Group nobody to run the httpd. Sun
apache2 (at least on Solaris 10) uses a dedicated user/group webservd.
That's better, because the user can thus be limited in rights even more (or
maybe the other way around: that user can be easily given more rights).
Especially when granting additional rights, that's something you do of
course *NOT* want to do when a "generic" user/group like "nobody" is used.

Because of that, it would be good, if CSW would follow what Sun does, as
it makes a lot of sense: Please use User webservd and Group webservd.
====================================================================== 

---------------------------------------------------------------------- 
 (0009254) bwalton (manager) - 2011-09-07 02:39
 https://www.opencsw.org/mantis/view.php?id=3930#c9254 
---------------------------------------------------------------------- 
Not a necessary change as site can provide preferred user/group by
configuration.



More information about the bug-notifications mailing list