List Info

Thread: Re: apache as non-root




Re: apache as non-root
country flaguser name
Lebanon
2007-11-06 09:07:12
thanks. But any workaround?
thanks.
--- Tony Stevenson <tonypc-tony.com> wrote:

> 
> Melanie Pfefer wrote:
> > hi
> > 
> > I modified user in httpd.conf but as long as the
> port
> > number is 80, only root can start apache.
> subsequent
> > process will be run as non-root.
> 
> This is expected behaviour.
> 
> > 
> > any idea how to allow this user to start apache?
> 
> To start Apache on port 80, you need root level
> access as these are 
> privilged ports.
> 
> You can user another account, but the port has to be
> > 1024.
> 
> 
> Tony
> 



     
___________________________________________________________

Want ideas for reducing your carbon footprint? Visit Yahoo!
For Good  http://uk.promotions.yahoo.com/forgood/environment.html

------------------------------------------------------------
---------
The official User-To-User support forum of the Apache HTTP
Server Project.
See <URL:http://htt
pd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribehttpd.apache.org
   "   from the digest: users-digest-unsubscribehttpd.apache.org
For additional commands, e-mail: users-helphttpd.apache.org


Re: apache as non-root
country flaguser name
United Kingdom
2007-11-06 09:14:21
Melanie Pfefer wrote:
> thanks. But any workaround?

No, not that I know of.
Re: apache as non-root
user name
2007-11-06 09:20:29
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

A work around, sort of:

If you are using an OS with the ability to port forward
(iptables on
linux for example) you can create rules to forward the port
80
connection to a high port (say 8080) that the non-root-user
apache
instance is listening on.

You end up listening on two ports, but you get the desired
effect of
having a totally user owned (startable stoppable without
ever being
root) apache instance that is accessible via port 80.

chris


Melanie Pfefer wrote:
> thanks. But any workaround?
> thanks.
> --- Tony Stevenson <tonypc-tony.com> wrote:
> 
>> Melanie Pfefer wrote:
>>> hi
>>>
>>> I modified user in httpd.conf but as long as
the
>> port
>>> number is 80, only root can start apache.
>> subsequent
>>> process will be run as non-root.
>> This is expected behaviour.
>>
>>> any idea how to allow this user to start
apache?
>> To start Apache on port 80, you need root level
>> access as these are 
>> privilged ports.
>>
>> You can user another account, but the port has to
be
>>> 1024.
>>
>> Tony
>>
> 
> 
> 
>      
___________________________________________________________

> Want ideas for reducing your carbon footprint? Visit
Yahoo! For Good  http://uk.promotions.yahoo.com/forgood/environment.html
> 
>
------------------------------------------------------------
---------
> The official User-To-User support forum of the Apache
HTTP Server Project.
> See <URL:http://htt
pd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribehttpd.apache.org
>    "   from the digest:
users-digest-unsubscribehttpd.apache.org
> For additional commands, e-mail: users-helphttpd.apache.org
> 

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org


iD8DBQFHMIY8tqidmIdniVgRAjtMAJoCM37rSapVIHec8t7tm/QKeqT9ZQCe
Lskc
yS2/8s/BLWdB13rzY9ZEz7M=
=2F1K
-----END PGP SIGNATURE-----

------------------------------------------------------------
---------
The official User-To-User support forum of the Apache HTTP
Server Project.
See <URL:http://htt
pd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribehttpd.apache.org
   "   from the digest: users-digest-unsubscribehttpd.apache.org
For additional commands, e-mail: users-helphttpd.apache.org


[1-3]

about | contact  Other archives ( Real Estate discussion Medical topics )