Is my Apache server running as the root user or not?

Jesper Wallin jesper at hackunite.net
Fri Dec 3 22:24:28 PST 2004


Heya..

By reading my /usr/local/etc/apache2/httpd.conf, I can find out that my Apache is
running as the user "www" and the group "www" .. Yet, when I run sockstat, it tells me
one of the forks are runned as root and listening on port 80 as well as the other forks
are runned by www:www.. If I got a lot of users connecting to my server on port 80, will
thier requests ever be answered by the root fork or the www:www forks?

--- snip ---
[root at ninja:~]# sockstat -l4p80
USER     COMMAND    PID   FD PROTO  LOCAL ADDRESS         FOREIGN ADDRESS www      httpd
     18149 3  tcp4   *:80                  *:*
www      httpd      18148 3  tcp4   *:80                  *:*
www      httpd      18147 3  tcp4   *:80                  *:*
www      httpd      14055 3  tcp4   *:80                  *:*
www      httpd      14054 3  tcp4   *:80                  *:*
www      httpd      14053 3  tcp4   *:80                  *:*
www      httpd      14052 3  tcp4   *:80                  *:*
www      httpd      14051 3  tcp4   *:80                  *:*
root     httpd      14050 3  tcp4   *:80                  *:*
[root at ninja:~]#
--- snip ---


Best regards,
Jesper Wallin




More information about the freebsd-security mailing list