Newb Web server security question...

[legbend]

I've installed FC3 on my dual EM64T box to run as a web server. I did all of the removal and adding of programs as Root user. Does this create an issue w/ security as far as access, permissions, etc?

[Jman]

No. You need root access to install things. The issue is when you run things as root, because root can do anything.

[legbend]

How can you tell if something is being run AS root? I'm running Apache2 + MySQL4.1 as services, those shouldn't be effected, right?

[Tashiro]

Type at the console:
whoami

Tashiro

Edit: oops that is not what you asked.

[Jman]

Shouldn't be a problem. Run top in a terminal, press u and enter root. Then you will see all processes owned by root.

[legbend]

Shouldn't be a problem. Run top in a terminal, press u and enter root. Then you will see all processes owned by root.


is there anything specific I should look out for? my list looks something like this:

X
top
init
migration
ksoftirq
events
khelper
kblockd
pdflush
events
konsole
aio

[maikeru]

It looks like you're probably not running Apache as root. The process to look out for is httpd. Just to make sure though I'd run this command:
ps -ef|grep httpd
You should get a list of all your Apache processes with various details. The name of the user running each process should appear at the far left (at least it does for me). If it says root, then you're running Apache as root...

[ltam]

I believe the httpd.conf names the user that runs the process. I think the default is apache.