Originally Posted by gadikota
I have a custom application built(previous vendor built it and we took over it with no KT) using CGI and apache. looking at the conf file the apache was serving pages as root as the CGI invokes commands that need to be run as root.(I know this is a bad idea of running apache as root). All we did is to reboot the server and now the site doesnt come up and httpd service is in "maintenance" state with error.
"Error: Apache has not been designed to serve pages while
running as root. There are known race conditions that
will allow any local user to read any file on the system.
If you still desire to serve pages as root then
add -DBIG_SECURITY_HOLE to the CFLAGS env variable
and then rebuild the server.
It is strongly suggested that you instead modify the User
directive in your httpd.conf file to list a non-root
[ Mar 20 09:53:17 Method "start" exited with status 1 ]"
Couple of questions:
1) would a reboot change any apache binaries that would cause this and need a rebuild of apache ?
No. However, if you just updated the server (you don't say anything about what preceded the failure, what changed, what you were doing, etc.), then the Apache binary may have been updated. By default, it's compiled to NOT run as root, ever. The message tells you this, that its a bad idea, and how to do it if you really want to.
2) Is there a easy fix that i can bring the application up by letting apache run as root? I have been trying to get it working from last 2 days and no luck till now.
Are you starting Apache when you're logged in as root, or as a regular user? What version/distro of Linux are you using? Have you tried running "apachectl start"?