Question about the owner of process httpd

From: omar@rkmcinc.com
Date: Fri Oct 17 2003 - 09:22:29 EDT


Hi Gurus

If found off topic in mailing list, pls. let me know where to go to get the
answer..

The question is about the best practice and secuirty.

I have a webserver and as SA I am responisble for the securtiy threat and
performance.

Application team has built the iplanet server and the prcessess are running as

root rather than nobody and as best of my knowldege, the web server processes
are run as nobody only ..

how much truth is this and is this a security threat to the env or not ...

 nobody 6649 6648 0 08:54:27 ? 0:36 ns-httpd -d
  nobody 4255 4243 0 Sep 10 ? 1:06 ns-httpd -d
  nobody 7111 7109 0 09:02:13 ? 0:39 ns-httpd -d
    root 4242 9634 3 Sep 10 ? 2258:08 ns-httpd -d
   root 6869 21506 4 08:58:00 ? 194:10 ns-httpd -d
  nobody 10659 10658 0 10:53:29 ? 1:24 ns-httpd -d
    root 6648 6647 3 08:54:26 ? 193:57 ns-httpd
  nobody 6689 6688 0 08:55:10 ? 0:36 ns-httpd -d
    root 20834 20833 3 14:35:33 ? 146:59 ns-httpd -
    root 23473 23472 0 Sep 10 ? 0:11 ns-httpd -d
    root 7070 5662 3 09:01:07 ? 193:34 ns-httpd -d
  nobody 6672 6671 0 08:55:00 ? 0:50 ns-httpd -d
    root 6835 11336 4 08:57:00 ? 193:47 ns-httpd -d
    root 21297 18906 3 14:43:51 ? 146:07 ns-httpd -d
    root 7129 7128 3 09:02:24 ? 192:16 ns-httpd -d
    root 6899 12532 3 08:58:38 ? 193:11 ns-httpd -d
  nobody 6705 6704 0 08:55:23 ? 0:34 ns-httpd -d
  nobody 6903 6899 0 08:58:44 ? 0:52 ns-httpd -d
  nobody 9830 9829 0 10:26:45 ? 4:16 ns-httpd -d
  nobody 7100 7099 0 09:01:55 ? 0:44 ns-httpd -d
  nobody 4254 4242 0 Sep 10 ? 1:06 ns-httpd -d
_______________________________________________
sunmanagers mailing list
sunmanagers@sunmanagers.org
http://www.sunmanagers.org/mailman/listinfo/sunmanagers



This archive was generated by hypermail 2.1.7 : Wed Apr 09 2008 - 23:27:18 EDT