[ale] Lowering account privileges in a script

John Mills johnmills at speakeasy.net
Thu Oct 25 14:00:35 EDT 2007


Jeff, All -

Thanks for the help. Actually I want to test the 'GoAhead' server to track 
down some URL vulnerabilities, so the parameters might be a bit different. 
This'll get me rolling.

 - Mills

On Thu, 25 Oct 2007, Jeff Lightner wrote:

> I thought apache always had to start as root and it was the httpd.conf
> that told it what user to run the actual httpd accessed by users as.
 
> -----Original Message-----
> From: ale-bounces at ale.org [mailto:ale-bounces at ale.org] On Behalf Of
> David Tomaschik
 
> Something like this should do:
> 
> su -c "apachectl start" nobody
 
> John Mills wrote:

> > I would like to run a web server as 'nobody:nobody' rather than a more
> > privileged user (especially since I plan to crash-test it!). How can I
> > launch it that way?



More information about the Ale mailing list