Re: [CRONOLOG]: write logs as Apache User 'nobody'

[Angus Berry <angus.berry@xxxxxxxxx>]

Thanks for the suggestion. I tried:

CustomLog "| sudo -u nobody /usr/local/sbin/cronolog /home/....blabla

In my Apache httpd.conf, but then Apache won't start, unless I comment
the line back out.

Did I misunderstand your suggestion?


On Sat, 2004-11-13 at 14:06, Sven Köhler wrote:
> > I have a fairly standard Apache 2.0.47 install on Linux. It starts as
> > root and then switches to user 'nobody', however the logs are still
> > written as owned by the user 'root'
> 
> Well, afaik that's the default behaviour since a file-write is not 
> considered to be dangerous. If you consider cronolog as a security risk, 
> you may be abled to execute it by replacing "| cronolog" with "| sudo -u 
> nobody cronolog" in the config-files.
>