Hey there,
A mate has a basic VPS running debian, and as far as i can tell hes running HTTPD as root. In fact, he says he does most things as root, which is a habit that needs to be broken for obvious reasons.
Heres the output from webmin of the running services. Im average at linux, used to gui and only know fedora command line, so lost when it comes to debian.
Code:
26604 	root 	0.6 % 	/usr/share/webmin/proc/index_cpu.cgi
28032 	mysql 	0.1 % 	/usr/sbin/mysqld --basedir=/usr --datadir=/var/lib/mysql --user=mysql --pid-file ...
1 	root 	0.0 % 	init [2]
13695 	postfix 	0.0 % 	tlsmgr -l -t unix -u -c
19709 	proftpd 	0.0 % 	proftpd: (accepting connections)
20113 	daemon 	0.0 % 	/usr/local/apache2/bin/httpd
20135 	daemon 	0.0 % 	/usr/local/apache2/bin/httpd
24269 	root 	0.0 % 	sshd: root@pts/0
24286 	root 	0.0 % 	-bash
26605 	root 	0.0 % 	/usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
26606 	root 	0.0 % 	/usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
27873 	root 	0.0 % 	/sbin/syslogd
27933 	root 	0.0 % 	/bin/sh /usr/bin/mysqld_safe
28033 	root 	0.0 % 	logger -p daemon.err -t mysqld_safe -i -t mysqld
29947 	root 	0.0 % 	/usr/local/apache2/bin/httpd
30286 	root 	0.0 % 	/usr/lib/postfix/master
30308 	postfix 	0.0 % 	qmgr -l -t fifo -u
30311 	root 	0.0 % 	/usr/sbin/sshd
30343 	root 	0.0 % 	/usr/sbin/cron
32343 	root 	0.0 % 	/usr/bin/perl /usr/share/webmin/miniserv.pl /etc/webmin/miniserv.conf
Now HTTPD is running out of /home/user/ which is actually owned by root. So somehow, i want to change the owner (chown?) of /home/user/ to user, and then run HTTPD under that username, or whatever is the best method.

What else shouldn't be running as root?
Thanks in advance.