issue with what user apache2 is running as...

[bentaylor]

finally got ftp server working it seems after realising that it has to run as root from xinetd.conf but then switches to ftp user as defined in proftpd.conf.
Aaaaanyway.
no such luck with webserver. It is currently running as wwwrun, group www, this user and group came with the installation, as did apache2 - xinetd.conf contains:

service www
{
	socket_type     = stream
	disable		= no
	protocol        = tcp
	wait            = no
	user            = wwwrun
	group           = www
	server          = /etc/init.d/apache2
	FLAGS		= IPv6 IPv4
}

But it isn't bloody working. I'm sure it's something to do with the way I've shoehorned it into running from xinetd and overlooked an extra configurational step.
When I browse to localhost I get:

/usr/share/apache2/get_module_list: line 22: /etc/apache2/sysconfig.d/loadmodule.conf: Permission denied
/usr/share/apache2/get_module_list: line 23: 3: Bad file descriptor
/usr/share/apache2/get_module_list: line 88: 3: Bad file descriptor
/usr/share/apache2/get_module_list: line 88: 3: Bad file descriptor
/usr/share/apache2/get_module_list: line 88: 3: Bad file descriptor
/usr/share/apache2/get_module_list: line 88: 3: Bad file descriptor
/usr/share/apache2/get_module_list: line 88: 3: Bad file descriptor
/usr/share/apache2/get_module_list: line 88: 3: Bad file descriptor
/usr/share/apache2/get_module_list: line 88: 3: Bad file descriptor
/usr/share/apache2/get_module_list: line 88: 3: Bad file descriptor
/usr/share/apache2/get_module_list: line 88: 3: Bad file descriptor
/usr/share/apache2/get_module_list: line 88: 3: Bad file descriptor
/usr/share/apache2/get_module_list: line 88: 3: Bad file descriptor
/usr/share/apache2/get_module_list: line 88: 3: Bad file descriptor
/usr/share/apache2/get_module_list: line 88: 3: Bad file descriptor
/usr/share/apache2/get_module_list: line 88: 3: Bad file descriptor
/usr/share/apache2/get_module_list: line 88: 3: Bad file descriptor
/usr/share/apache2/get_module_list: line 88: 3: Bad file descriptor
/usr/share/apache2/get_module_list: line 88: 3: Bad file descriptor
/usr/share/apache2/get_module_list: line 88: 3: Bad file descriptor
/usr/share/apache2/get_module_list: line 88: 3: Bad file descriptor
/usr/share/apache2/get_module_list: line 88: 3: Bad file descriptor
/usr/share/apache2/get_module_list: line 88: 3: Bad file descriptor
/usr/share/apache2/get_module_list: line 88: 3: Bad file descriptor
/usr/share/apache2/get_module_list: line 88: 3: Bad file descriptor
/usr/share/apache2/get_module_list: line 99: 3: Bad file descriptor
/usr/share/apache2/get_module_list: line 105: /etc/apache2/sysconfig.d/global.conf: Permission denied
/usr/share/apache2/get_module_list: line 106: 3: Bad file descriptor
/usr/share/apache2/get_module_list: line 122: 3: Bad file descriptor
/usr/share/apache2/get_module_list: line 128: 3: Bad file descriptor
/usr/share/apache2/get_module_list: line 132: 3: Bad file descriptor
/usr/share/apache2/get_module_list: line 133: 3: Bad file descriptor
/usr/share/apache2/get_module_list: line 136: 3: Bad file descriptor
/usr/share/apache2/get_module_list: line 143: 3: Bad file descriptor
/usr/share/apache2/get_includes: line 15: /etc/apache2/sysconfig.d/include.conf: Permission denied
/usr/share/apache2/get_includes: line 16: 3: Bad file descriptor
/usr/share/apache2/get_includes: line 43: 3: Bad file descriptor
Usage: /etc/init.d/apache2 <command> <server flags>

where <command> is one of:
        start              - start httpd
        startssl           - start httpd with -DSSL
        stop               - stop httpd (sendign SIGTERM to parent)
        try-restart        - stop httpd and if this succeeds (i.e. if
                             it was running before), start it again.
        status             - check whether httpd is running
        restart            - stop httpd if running; start httpd
        reload|graceful    - do a graceful restart by sending a SIGUSR1 or 
                             start if not running
        configtest         - do a configuration syntax test
        extreme-configtest - try to run httpd as nobody (detects more errors 
                             by actually loading the configuration, but cannot 
                             read SSL certificates)
        probe              - probe for the necessity of a reload, give 
                             out the argument which is required for a reload.
                             (by comparing conf files with pidfile timestamp)
        full-server-status - dump a full status screen; requires lynx or w3m 
                             and mod_status enabled
        server-status      - dump a short status screen; requires lynx or w3m
                             and mod_status enabled
        help               - this screen

optional server flags are passed through to httpd.

I don't want to run apache as root - I'm sure that's a security vulnerability isn't it??!!1
But it seems a bit of a kludge not to mention longwinded to give wwwrun explicit permissions to all those things it complains about. Or is that the only way?

[bentaylor]

ignore me,... apache2 can't run under xinetd....
hey i'm getting good at this, might try my hand and answer some posts tomorrow...
better in our pocket than bill's!