[ale] Lowering account privileges in a script

David Tomaschik ozone at webgroup.org
Thu Oct 25 12:36:53 EDT 2007


Probably -- I was just using it as an example.  :)  It would definitely
need to start as root to access any port < 1024 (except on systems using
capabilities).


Jeff Lightner wrote:
> I thought apache always had to start as root and it was the httpd.conf
> that told it what user to run the actual httpd accessed by users as.
>
> -----Original Message-----
> From: ale-bounces at ale.org [mailto:ale-bounces at ale.org] On Behalf Of
> David Tomaschik
> Sent: Thursday, October 25, 2007 12:26 PM
> To: John Mills; Atlanta Linux Enthusiasts
> Subject: Re: [ale] Lowering account privileges in a script
>
> Something like this should do:
>
> su -c "apachectl start" nobody
>
>
>
> John Mills wrote:
>   
>> ALErs -
>>
>> I would like to run a web server as 'nobody:nobody' rather than a more
>>     
>
>   
>> privileged user (especially since I plan to crash-test it!). How can I
>>     
>
>   
>> launch it that way?
>>
>> TIA.
>>  - Mills
>>
>>   
>>     
>
> _______________________________________________
> Ale mailing list
> Ale at ale.org
> http://www.ale.org/mailman/listinfo/ale
> ----------------------------------
> CONFIDENTIALITY NOTICE: This e-mail may contain privileged or confidential information and is for the sole use of the intended recipient(s). If you are not the intended recipient, any disclosure, copying, distribution, or use of the contents of this information is prohibited and may be unlawful. If you have received this electronic transmission in error, please reply immediately to the sender that you have received the message in error, and delete it. Thank you.
> ----------------------------------
> _______________________________________________
> Ale mailing list
> Ale at ale.org
> http://www.ale.org/mailman/listinfo/ale
>   



More information about the Ale mailing list