Berkeley CSUA MOTD:Entry 42993
Berkeley CSUA MOTD
 
WIKI | FAQ | Tech FAQ
http://csua.com/feed/
2025/07/09 [General] UID:1000 Activity:popular
7/9     

2006/5/9 [Computer/SW/WWW/Server, Computer/SW/Unix, Computer/SW/Languages/Misc] UID:42993 Activity:nil
5/9     Running httpd as nobody isn't that secure. If one asshole decides to
        do a DoS (fork script) as nobody, there's no way to track down the
        perpetrator. This is why "suexec" is highly recommended, plus
        users don't need to chmod a+rx script.cgi.
        \_ Uh, it's totally trivial to track down the perpetrator with or
           without suexec.  httpd should run as something other than nobody,
           but that's only because nobody is over-used, and whether httpd
           runs as nobody is orthogonal to the question of whether suexec
           should be on.  -tom
           \_ Ok fine. I gave a bad example, but we both agree that nobody
              is good.
2025/07/09 [General] UID:1000 Activity:popular
7/9     

You may also be interested in these entries...
2008/10/14-20 [Computer/SW/Languages/Misc, Computer/SW/Languages/Web] UID:51527 Activity:nil
10/14   2 apache 2.0.52 servers running on Linux boxes.  Identical httpd.conf
        files (except for ServerName).  But on one, if a CGI script takes
        longer than 300 seconds, it times out.  The other, not.  Why is that?
        \_ Perhaps network equipment configuration. Or try comparing settings
           in /proc/sys/net.
           \_ I ran /sbin/sysctl -a | grep tcp, all settings are the same.
	...
2007/12/11-14 [Computer/SW/OS/Linux, Computer/SW/WWW/Server] UID:48785 Activity:nil
12/11   Apache/Linux question: I've got apache 2.0.52 on an idle redhat
        box (2.6.9-55 kernel).  Every so often one to four apache procs
        will run the cpu at 100% for any where from 15 to 90 mins, then
        drop back to normal.  USR and SYS time both increase to levels
        that the production boxes don't reach when serving traffic at
        noon.  I've checked apache and linux kernel versions, several
	...
2006/8/14-16 [Computer/SW/OS/FreeBSD, Computer/SW/Languages/Web] UID:43990 Activity:nil
8/14    Anyone know if there's a FreeBSD equivalent to Linux binfmt-misc?
        \_ Pretty sure not.  OOC, why do you want it?
           \_ Just setup apache with suexec and fcgid.  wanted userdir
              php modules to start in suexec w/o having to copy php binary
              to each user's public_html.  For now, will just create an
              entry in httpd.conf for each user and have a wrapper script
	...
2006/2/28-3/1 [Computer/SW/WWW/Server] UID:42026 Activity:nil
2/27    What apache2 directive should I use if I want apache to
        execute .cgi files that are symbolic links? Thanks.
        \_ http://httpd.apache.org/docs/2.2
           Look at the Options directive. -dans
	...
2006/1/19-21 [Computer/SW/Languages/Misc, Computer/SW/Languages/Web] UID:41436 Activity:moderate
1/19    How do I configure apache so that all the files in certain
        directories are executed as PHP without the ugly .php extension?
        \_ Turn on MultiViews; you can leave the files with the .php
           extension, but just access them without using the extension.  -tom
           \_ Oh goodie, someone talking about MultiViews.  Are there any
              potential problems with turning them on I should be aware of?
	...
2006/1/3 [Computer/SW/WWW/Server] UID:41208 Activity:nil
12/3    anyone know what the command is to see what modules my apache
        installation has installed? I know I've done this before but
        can never remember. tried googling. thanks.       - rory
        \_ httpd -l will list the statically-compiled modules. For dynamic
           modules, I think you need to look for LoadModule lines in
           httpd.conf. -gm
	...
2005/9/19-21 [Computer/SW/Unix] UID:39746 Activity:nil
9/18    I just installed Red Hat Enterprise Linux 2.1 and everything
        seems to work ok except my httpd cannot be reached outside
        of the box. I have no problem pinging and sshing into the
        system, but http connection would not work. However, it does
        seem to work when I launch firefox within (same machine).
        What could cause this? I'm not familiar with PAM and I'm
	...
2005/2/3 [Computer/SW/WWW/Browsers] UID:36053 Activity:moderate
2/2     What is the exact user-agent string I shouold give lynx, wget, curl and
        the like to make them indistinguishable from say, MSIE browser running
        on a wintel?  Googling led me to to things as simple as MSIE or
        something with parenthesized list and I am confused.  Thanks.
        \_ tail -f /var/log/httpd/access.log
        \_ somebox% nc -l -p 8888
	...