FS#1737 - apache 2.0.52-1: suExec compiled for 'www', runs as 'nobody'

Attached to Project: Arch Linux
Opened by Joe Drago (drpascal) - Thursday, 04 November 2004, 22:56 GMT
Task Type Bug Report
Category Packages: Current
Status Closed
Assigned To No-one
Architecture not specified
Severity Medium
Priority Normal
Reported Version 0.7 Wombat
Due in Version Undecided
Due Date Undecided
Percent Complete 0%
Votes 0
Private No

Details

After my /var/log/httpd/suexec_log being flooded with:

[2004-11-04 14:44:58]: user mismatch (nobody instead of www)

I realized that 'www' is compiled into the suExec module of the Apache package, and for security purposes, refuses to suExec unless the web server is running as user 'www'. The Arch package currrently runs as user 'nobody'.

The simplest fix seems to recompile the package, clueing in suExec to use user 'nobody.'
This task depends upon

Closed by  Judd Vinet (judd)
Saturday, 06 November 2004, 05:56 GMT
Reason for closing:  Fixed

Loading...