I understand that, the thing is that it _is_ deleting files owned exclusively by root. The only thing I can figure is that I happen to be a www client on the first apache process. "ps aux": <snip> root 204 0.0 0.1 2240 1288 ttyp0 S Jun16 0:00 -bash root 15892 0.0 0.5 6920 4320 ? S Jun16 0:00 /usr/local/apache2/bin/httpd -k start <--that right there apache 15905 0.0 0.6 7104 4800 ? S Jun16 0:00 /usr/local/apache2/bin/httpd -k start apache 15906 0.0 0.6 7152 4808 ? S Jun16 0:00 /usr/local/apache2/bin/httpd -k start apache 15907 0.0 0.6 7028 4700 ? S Jun16 0:00 /usr/local/apache2/bin/httpd -k start apache 15908 0.0 0.6 7088 4784 ? S Jun16 0:00 /usr/local/apache2/bin/httpd -k start apache 15909 0.0 0.6 7012 4652 ? S Jun16 0:00 /usr/local/apache2/bin/httpd -k start apache 15911 0.0 0.6 7164 4944 ? S Jun16 0:00 /usr/local/apache2/bin/httpd -k start apache 15912 0.0 0.6 7104 4768 ? S Jun16 0:00 /usr/local/apache2/bin/httpd -k start apache 15913 0.0 0.6 7152 4800 ? S Jun16 0:00 /usr/local/apache2/bin/httpd -k start root 16499 0.0 0.1 2588 792 ttyp0 R 09:59 0:00 ps aux </snip> Can you see what I'm thinking? I don't know if my hypothesis is sound, I don't know that much about how apache actually "thinks".
Thanks, Jake "Adam Voigt" <[EMAIL PROTECTED]> wrote in message news:[EMAIL PROTECTED] > You can start apache with "apachectl start" as root just fine, > you don't need to su to the apache user. And you must be > mis-understanding the permissions or something cause if you > do infact have apache running as a seperate user, there's no > way it can delete a file owned by root unless maybe the user > it's running as is in the root group. > > > > On Tue, 2003-06-17 at 11:47, Jacob Marble wrote: > > Hey all- > > I'm writing some PHP scripts that have the ability to delete, rename, > > upload, etc. files to the webserver. It's a simple on-line file manager for > > some family members. > > The question: I don't want to allow apache to delete certain files, > > specifically files that are owned by root. But it can. I made a simple > > phpinfo.php file and I can delete it with this file manager. I don't think > > it ought to, since it's run as user nobody (httpd.conf setting). I've tried > > changing the setting in httpd.conf to a new user called apache, still no > > good. > > Doing a "ps aux" from the bash prompt says that apache has about 6 or 8 > > processes, the first of which is being run as root; the rest are apache (or > > nobody, depending on the httpd.conf setting). To remedy this, I stopped > > apache and then restarted it with: > > su -c "/usr/local/apache2/bin/apachectl start" apache > > It wouldn't start, complaining that it couldn't access the log file. > > I've tried chown'ing the inaccessable files, I've tried doing my make > > install as user apache, all did no good. > > Does anyone know a good solution to this problem? How to get apache to > > run completely as a user other than root? > > > > Thanks in advance, > > > > Jake > > > > LandEZ > -- > Adam Voigt ([EMAIL PROTECTED]) > Linux/Unix Network Administrator > The Cryptocomm Group > -- PHP Install Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php