PHP may be executing as a "privileged" group and user, which could be a serious security vulnerability
Posted
by
Martin
on Ask Ubuntu
See other posts from Ask Ubuntu
or by Martin
Published on 2012-09-27T18:52:34Z
Indexed on
2012/10/02
9:49 UTC
Read the original article
Hit count: 343
I ran some security tests on a Ubuntu 12.04 Server, and I've got these warnings :
PHP may be executing as a "privileged" group, which could be a serious security vulnerability.
PHP may be executing as a "privileged" user, which could be a serious security vulnerability.
In /etc/apache2/envvars, I have this:
export APACHE_RUN_USER=www-data
export APACHE_RUN_GROUP=www-data
And all files in /var/www are having these user/group: www-data:www-data
Am I setting this correctly? What should I do to fix this problem?
© Ask Ubuntu or respective owner
