Re: [users@httpd] how can I serve pages while running as a root

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



what i did is, i really install new FC4 on another harddisk.
download apache_1.3.33.tar.gz
tar -xvzf apache_1.3.33.tar.gz
edit src/Configuration
       EXTRA_CFLAGS=-DBIG_SECURITY_HOLE
./configure --prefix=/usr/local/apache --server-uid=root --server-gid=root
make
make install
/usr/local/apache/bin/apachectl start
cannot start, same error.....apache not designed to serve as root...........
if i change the user in the httpd.conf to another user, ok it can start
is there any log files that we can trace what's really wrong with this?
 
thanks,
warren
 
On 10/13/05, Joshua Slive <jslive@xxxxxxxxx> wrote:
On 10/13/05, Warren Beldad <advisory22@xxxxxxxxx> wrote:
> thanks for the help,
> but still it doesn't work. I modify again the src/Configuration and rebuild
> EXTRA_CFLAGS=-DBIG_SECURITY_HOLE
> (actually the src/Configuration doesnt have the space before the equal, just
> a typo error in my mail)
> still I got the same error.

Try starting with a fresh install (or, at minimum, starting with a
"make clean").

> I am creating a NAS like web, just like create users, create shares..etc...
>
> i have tried modifying the sudoers file but looks like it cannot really
> perform what i'm expected. just like create user, you need to modify the
> sudoers file permitting to execute useradd, but what about smbpasswd, the
> shadow, etc...maybe i need more research on this.
> but if i got the root running, then all my problems seems to be solve :-))
> dont worry about the security, only the root still can access this.
> I really need your help.

Still a very bad idea.  Apache is not designed to run as root, and
doing so may create many unexpected security problems.

Joshua.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
  "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx



[Index of Archives]     [Open SSH Users]     [Linux ACPI]     [Linux Kernel]     [Linux Laptop]     [Kernel Newbies]     [Security]     [Netfilter]     [Bugtraq]     [Squid]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Samba]     [Video 4 Linux]     [Device Mapper]

  Powered by Linux