Hello

I just have a couple of security questions:

#1 Can Apache Web Server Secure run as root or as user ? Can user run Apache?

#2 Can DNS (BIND) run as root or as user? Can user run DNS?

#3 Can Sendmail run as root or as user ? Can user run Sendmail?

Thanks

M.S.

This is real simple to answer but I must admit the best way to figure this out is to go to the

Redhat website and look for the online documentation. I'm not sure why so many linux users just don't refer them to reading material.


In the search line just type in users and groups....

If that is not good enough

1. The Apache Server is just intended to post webpages now you can allow users to have there own homepages as well as root to post a webpage. The hole way to limit access is to set directory permissions.
Not allow unwanted personel to have the best method is to set up a group for users and give them limited rights to directory's as well as to check the box asking to set permissions to all other folders below.

But I only find this option in the konqueror window display and not the nautlis window.....


2. Know the dns also can be run as a user as long as he knows the roots
password..... This is just you running a program as a administrator...

3 not sure about.....


Also keep in mind that it is going to depend exactly what you are using and how..

Not sure if you running a real server or just trying to limit people on client/home computer.

Best idea is to read documentation....
Remember just keep it simple.....

later and go luck

you can also set directory rights through the command line but I'm kinda new at this and don't know all the command line commands...

Yeah, gotta agree with Ckone some ppl tend to shun the docs...

#1 Can Apache Web Server Secure run as root or as user ?
Both. See RunAs directive in docs and httpd.conf. If you don't utilize the "RunAs" directive a user can only run it on ports >1024.

#2 Can DNS (BIND) run as root or as user?
Both. See the manual for "-u" (IIRC).

#3 Can Sendmail run as root or as user ?
Both. See the Sendmail docs for the RunAsUser, TrusedUser and DefaultUser directives. Because of file access and all making Sendmail run as a non-privileged user is sposed to be a "non-trivial task". If you've got above average requirements exceeding Sendmails' capabilities wrt security, look into an alternative like Postfix or Exim.