Newb Web server security question...

legbend · #1 1st December 2004, 06:08 PM

I've installed FC3 on my dual EM64T box to run as a web server. I did all of the removal and adding of programs as Root user. Does this create an issue w/ security as far as access, permissions, etc?

Jman · #2 1st December 2004, 10:06 PM

No. You need root access to install things. The issue is when you run things as root, because root can do anything.

legbend · #3 2nd December 2004, 05:42 PM

How can you tell if something is being run AS root? I'm running Apache2 + MySQL4.1 as services, those shouldn't be effected, right?

Tashiro · #4 2nd December 2004, 05:49 PM

Type at the console:

Code:

whoami

Tashiro

Edit: oops that is not what you asked.

Jman · #5 3rd December 2004, 12:23 AM

Shouldn't be a problem. Run

Code:

top

in a terminal, press u and enter root. Then you will see all processes owned by root.

legbend · #6 3rd December 2004, 06:28 PM

Quote:

Originally Posted by Jman

Shouldn't be a problem. Run

Code:

top

in a terminal, press u and enter root. Then you will see all processes owned by root.

is there anything specific I should look out for? my list looks something like this:

X
top
init
migration
ksoftirq
events
khelper
kblockd
pdflush
events
konsole
aio

maikeru · #7 4th December 2004, 06:38 PM

It looks like you're probably not running Apache as root. The process to look out for is httpd. Just to make sure though I'd run this command:

Code:

ps -ef|grep httpd

You should get a list of all your Apache processes with various details. The name of the user running each process should appear at the far left (at least it does for me). If it says root, then you're running Apache as root...

ltam · #8 7th December 2004, 05:47 PM

I believe the httpd.conf names the user that runs the process. I think the default is apache.