Ethical Hacking Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package. | Computer Forensics Training at InfoSec Institute Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors. |

| Subject: | Re: Solaris 10 necessary file question |
|---|---|
| Date: | Mon, 06 Nov 2006 12:22:46 -0500 |
Rogier Mulhuijzen wrote:
mail and local (to local) mail. I'm not sure the www account owns any files on a default install, but if it does, I expect them to be part of a web administration thingy. If you install or need Apache at any point,
Solaris does not have a "www" account although it does have a "webservd" which does appear to own a file things:
blackhole$ grep webservd /var/sadm/install/contents /var/apache2/logs d none 0755 webservd webservd SUNWapch2r /var/apache2/proxy d none 0755 webservd webservd SUNWapch2r
It was created for use by the Apache 2.0 service.
make sure it is configured to run using the nobody user, or keep the www user.
No! No one should be using the "nobody" account unless it is to support NFS services:
blackhole$ grep nobody /etc/passwd nobody:x:60001:60001:NFS Anonymous Access User:/: nobody4:x:65534:65534:SunOS 4.x NFS Anonymous Access User:/:
The web server should use webservd (which it does by default with the Apache 2.0 in Solaris 10). For Apache 1.0, there is a bug filed already: 4806419
If you need an account for your web server, use webservd or create a new one for it. That way, access to that service, its processes, its configs and its data can be more easily controlled.
g
| <Prev in Thread] | Current Thread | [Next in Thread> |
|---|---|---|
| ||
| Previous by Date: | Re: Solaris 10 necessary file question, Magnus Forsberg |
|---|---|
| Next by Date: | RE: Solaris 10 necessary file question, Levenglick, Jeff |
| Previous by Thread: | RE: Solaris 10 necessary file question, Rogier Mulhuijzen |
| Next by Thread: | RE: Solaris 10 necessary file question, Levenglick, Jeff |
| Indexes: | [Date] [Thread] [Top] [All Lists] |