note 2074 deleted from install.apache by imajes
| From: | imajes@php.net | Date: | Sun, 07 Apr 2002 11:37:04 +0000 |
| Subject: | note 2074 deleted from install.apache by imajes | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-28854@lists.php.net to get a copy of this message | ||
Running ANYTHING as root is a REAL bad idea, just look at the sendmail (aka rootmail) problem.
If a DOS attack against Apache is found, your ENTIRE system is vulnerable, because Apache is root.
If Apache is on as nobody, it has no rights in any directory besides the htdocs (and possible a
cgi-bin).
Root should ONLY be used for administrative functions, never for general use.