SOLVED: (Re: [Techtalk] Web Server User)

Raquel Rice raquel at thericehouse.net
Sun Oct 16 00:28:26 EST 2005


On Fri, 14 Oct 2005 16:56:08 -0700
Raquel Rice <raquel at thericehouse.net> wrote:

> Is there any reason that the user which Apache runs as
> (www-data/nobody) has a shell available to it?  I'm trying to get
> rid of some possible exploit areas.
> 
> -- 
> Raquel

I just found that this is/was the default with Debian and has been
reported as a bug.  Since I upgraded that server and another from
Debian Woody, I'll be checking them both.

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=274229

Thanks for everyone's help!

-- 
Raquel
============================================================
Live your life so that your children can tell their grandchildren
that you not only stood for something wonderful - you acted on it.
  --Dan Zadra, CEO Compendium, Inc.



More information about the Techtalk mailing list