Is my Apache server running as the root user or not?
Jesper Wallin
jesper at hackunite.net
Fri Dec 3 22:24:28 PST 2004
Heya..
By reading my /usr/local/etc/apache2/httpd.conf, I can find out that my Apache is
running as the user "www" and the group "www" .. Yet, when I run sockstat, it tells me
one of the forks are runned as root and listening on port 80 as well as the other forks
are runned by www:www.. If I got a lot of users connecting to my server on port 80, will
thier requests ever be answered by the root fork or the www:www forks?
--- snip ---
[root at ninja:~]# sockstat -l4p80
USER COMMAND PID FD PROTO LOCAL ADDRESS FOREIGN ADDRESS www httpd
18149 3 tcp4 *:80 *:*
www httpd 18148 3 tcp4 *:80 *:*
www httpd 18147 3 tcp4 *:80 *:*
www httpd 14055 3 tcp4 *:80 *:*
www httpd 14054 3 tcp4 *:80 *:*
www httpd 14053 3 tcp4 *:80 *:*
www httpd 14052 3 tcp4 *:80 *:*
www httpd 14051 3 tcp4 *:80 *:*
root httpd 14050 3 tcp4 *:80 *:*
[root at ninja:~]#
--- snip ---
Best regards,
Jesper Wallin
More information about the freebsd-security
mailing list