Re: [Leap 16.0] apache2 group wwwrun or www?

Hi, all --

...and then [email protected] said...
% Hi *,

[BTW, I immediately understood and appreciated this ;-]


% 
...
% What is correct - www or wwwrun?
[snip]

I have long preferred having a wwwrun user with a wwwrun group so that
the daemon can update any files it *should* but also a www user with
both www and wwwrun groups so that it can update content that the daemon
should *not* be able to change (plus anything the daemon can change,
since the owner might trim or rotate or whatever).  Writing a log file?
Definitely the run user.  Changing a static content file for some quickie
cgi script?  Sure, although the whole idea is a kludge.  Changing the
script itself or any other content?  Noooooo ...

So, having followed this thread as well as my befuddled old brain can
keep up, I have come to the understanding that there is no longer a
differentiation between the run user (limited modify ability) and the
content owner (changes OK).  How do folks keep things secure these days?


TIA & Have a great week

:-D
-- 
David T-G
See http://justpickone.org/davidtg/email/
See http://justpickone.org/davidtg/tofu.txt