Bug#573320: lighttpd: Don't run Lighttpd as www-data

2010-03-17 Thread Olaf van der Spek
On Wed, Mar 17, 2010 at 7:23 PM, Marco d'Itri wrote: > On Mar 10, Olaf van der Spek wrote: > >> Would it be possible to start FastCGI processes via spawn-fcgi and to run >> Lighttpd as another user than www-data (maybe user lighttpd)? >> I think this improves security as FastCGI processes can no

Bug#573320: lighttpd: Don't run Lighttpd as www-data

2010-03-17 Thread Marco d'Itri
On Mar 10, Olaf van der Spek wrote: > Would it be possible to start FastCGI processes via spawn-fcgi and to run > Lighttpd as another user than www-data (maybe user lighttpd)? > I think this improves security as FastCGI processes can no longer touch > Lighttpd (and it's log files). I believe t

Bug#573320: lighttpd: Don't run Lighttpd as www-data

2010-03-10 Thread Olaf van der Spek
Package: lighttpd Version: 1.4.26-1 Severity: wishlist Hi, Would it be possible to start FastCGI processes via spawn-fcgi and to run Lighttpd as another user than www-data (maybe user lighttpd)? I think this improves security as FastCGI processes can no longer touch Lighttpd (and it's log files