SOLVED: (Re: [Techtalk] Web Server User)
Raquel Rice
raquel at thericehouse.net
Sun Oct 16 00:28:26 EST 2005
On Fri, 14 Oct 2005 16:56:08 -0700
Raquel Rice <raquel at thericehouse.net> wrote:
> Is there any reason that the user which Apache runs as
> (www-data/nobody) has a shell available to it? I'm trying to get
> rid of some possible exploit areas.
>
> --
> Raquel
I just found that this is/was the default with Debian and has been
reported as a bug. Since I upgraded that server and another from
Debian Woody, I'll be checking them both.
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=274229
Thanks for everyone's help!
--
Raquel
============================================================
Live your life so that your children can tell their grandchildren
that you not only stood for something wonderful - you acted on it.
--Dan Zadra, CEO Compendium, Inc.
More information about the Techtalk
mailing list