Commit ef272062 authored by Wilfredo Sanchez's avatar Wilfredo Sanchez
Browse files

Using the user nobody (or similar accounts on other systems like 

nouser) violates the purpose of that user.  User nobody exists
specifically as a user that no process runs as and that owns no files
on disk.  Same for nogroup.

The user and group daemon are the generic system services user and
group.  Use those instead.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@220032 13f79535-47bb-0310-9956-ffa450edef68
parent 03c39915

docs/conf/httpd.conf.in

+5 −9
Changes for docs/conf/httpd.conf.in: 5 added lines, 9 removed lines.
Original line number Diff line number Diff line
@@ -60,15 +60,11 @@ Listen @@Port@@ 
# httpd as root initially and it will switch.  

#

# User/Group: The name (or #number) of the user/group to run httpd as.

#  . On SCO (ODT 3) use "User nouser" and "Group nogroup".

#  . On HPUX you may not be able to use shared memory as nobody, and the

#    suggested workaround is to create a user www and use that user.

#  NOTE that some kernels refuse to setgid(Group) or semctl(IPC_SET)

#  when the value of (unsigned)Group is above 60000; 

#  don't use Group #-1 on these systems!

#

User nobody

Group #-1

# It is usually good practice to create a dedicated user and group for

# running httpd, as with most system services.

#

User daemon

Group daemon

</IfModule>

</IfModule>