mod_ruid2 upgrade

ramil

• March 15, 2016 10:20

Hello, after rebuilding of apache+php with mod_ruid2 some apache processes still running under 'nobody' user, I made a httpd restart but no success, can you explain how to completely switch to mod_ruid? Thanks

• 

  JacobPerkins

  • March 15, 2016 15:35

  Hi, When using mod_ruid2, and there have been no requests, Apache will run as nobody. Once a request comes in for that specific user, Apache will drop to that UID.
  # ps fuax | grep httpd root 29663 0.0 0.0 103300 872 pts/0 S+ 10:34 0:00 \_ grep httpd root 9044 0.0 0.7 226832 23184 ? Ss 10:28 0:00 /usr/local/apache/bin/httpd -k start nobody 9047 0.0 0.7 227128 21928 ? S 10:28 0:00 \_ /usr/local/apache/bin/httpd -k start nobody 9048 0.0 0.7 227136 21952 ? S 10:28 0:00 \_ /usr/local/apache/bin/httpd -k start nobody 9049 0.0 0.7 227136 21960 ? S 10:28 0:00 \_ /usr/local/apache/bin/httpd -k start nobody 9050 0.0 0.7 227136 21920 ? S 10:28 0:00 \_ /usr/local/apache/bin/httpd -k start nobody 9051 0.0 0.7 227144 21932 ? S 10:28 0:00 \_ /usr/local/apache/bin/httpd -k start nobody 10247 0.0 0.7 227136 21972 ? S 10:29 0:00 \_ /usr/local/apache/bin/httpd -k start nobody 26051 0.0 0.6 226832 18504 ? S 10:32 0:00 \_ /usr/local/apache/bin/httpd -k start nobody 26536 0.0 0.6 226832 18500 ? S 10:33 0:00 \_ /usr/local/apache/bin/httpd -k start
  Hit the site
  # ps fuax | grep httpd root 29674 0.0 0.0 103300 872 pts/0 S+ 10:34 0:00 \_ grep httpd root 9044 0.0 0.7 226832 23184 ? Ss 10:28 0:00 /usr/local/apache/bin/httpd -k start nobody 9047 0.0 0.7 227128 21928 ? S 10:28 0:00 \_ /usr/local/apache/bin/httpd -k start nobody 9048 0.0 0.7 227136 21952 ? S 10:28 0:00 \_ /usr/local/apache/bin/httpd -k start nobody 9049 0.0 0.7 227136 21960 ? S 10:28 0:00 \_ /usr/local/apache/bin/httpd -k start nobody 9050 0.0 0.7 227136 21920 ? S 10:28 0:00 \_ /usr/local/apache/bin/httpd -k start nobody 9051 0.0 0.7 227144 21932 ? S 10:28 0:00 \_ /usr/local/apache/bin/httpd -k start nobody 10247 0.0 0.7 227136 21972 ? S 10:29 0:00 \_ /usr/local/apache/bin/httpd -k start perk 26051 0.0 0.6 226968 20640 ? S 10:32 0:00 \_ /usr/local/apache/bin/httpd -k start nobody 26536 0.0 0.6 226832 18500 ? S 10:33 0:00 \_ /usr/local/apache/bin/httpd -k start
  Notice the Apache pid running under 'perk'. This is mod_ruid2 dropping privileges to that user. Is this not happening on your server?

  0

Please sign in to leave a comment.