On Tue, 13 Aug 2019 14:43:11 -0400 Michael Orlitzky wrote: >On 8/13/19 2:30 PM, Lars Wendler wrote: >> >> If we leave ACCT_USER_HOME empty HOME will be set to >> /dev/null for apache user. I don't know if this is what we want. >I'm not 100% sure either, but it's pretty likely that if an unwritable >root-owned home directory would work, then so would /dev/null. > >(It works fine on our web servers, but nothing is actually running as >"apache" on them.) >
I'm not really sure what the impact might be. I have only one single apache installation and that is a productive one. I do not want to mess with that installation. Lars -- Lars Wendler Gentoo package maintainer GPG: 21CC CF02 4586 0A07 ED93 9F68 498F E765 960E 9B39
pgpuXDFFFkNsa.pgp
Description: Digitale Signatur von OpenPGP
