Is running apache as a root is a security risk?
Answers were Sorted based on User's Feedback
Answer / abhay
No.root process opens port 80, but never listens to it, so
no user will actually enter the site with root rights. If
you kill the root process, you will see the other kids
disappear as well.
| Is This Answer Correct ? | 9 Yes | 1 No |
Answer / josey
Yes it is a big risk, it is always advisable to have it as
a sperate UID AND GID
| Is This Answer Correct ? | 8 Yes | 2 No |
Answer / abner
To open a standard port (http 80) one should have "root"
privilege.
This process running as root isn't used to establish a 3 way
handshake with hosts.
| Is This Answer Correct ? | 2 Yes | 2 No |
How to carry out apache efficiency benchmark?
Can you change the listening port from default to something else?
How secure is apache server?
Where can I find apache logs?
Which tool you have used for apache benchmarking?
Is apache license free?
What is apache http server?
How to ensure apache process run with non-root/nobody user?
Explain about servertype directive in apache server?
What is the typical log file size per 10k requests in an apache web server?
How do I start apache server?
Briefly explain apache web server?