PS> Hello, PS> I am running Apache 1.3.9 and I am wondering, if this might be a PS> security issue. There is always one Apache-process running as root.
PS> [..skip..] >> From my point of understanding Apache starts as root and then switches PS> to www-data. Ok, but does this mean, that a host might connect to the PS> root-Apache? It is ok. It is main Apache process that is running as root. It only starts new child proccess (those processes with www-data uid) that process requests. Usually it happens only at start time but can happen later if there are not enough child processes or server was restarted. Main apache procces never processes requests itself. -- -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- | Ilya Martynov (http://martynov.org/) | | GnuPG 1024D/323BDEE6 D7F7 561E 4C1D 8A15 8E80 E4AE BE1A 53EB 323B DEE6 | | AGAVA Software Company (http://www.agava.com/) | -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
