Is running apache as a root is a security risk?
Answers were Sorted based on User's Feedback
Answer / abhay
No.root process opens port 80, but never listens to it, so
no user will actually enter the site with root rights. If
you kill the root process, you will see the other kids
disappear as well.
| Is This Answer Correct ? | 9 Yes | 1 No |
Answer / josey
Yes it is a big risk, it is always advisable to have it as
a sperate UID AND GID
| Is This Answer Correct ? | 8 Yes | 2 No |
Answer / abner
To open a standard port (http 80) one should have "root"
privilege.
This process running as root isn't used to establish a 3 way
handshake with hosts.
| Is This Answer Correct ? | 2 Yes | 2 No |
Does Apache include a search engine?
How to ensure web server is getting started after server reboot?
What do you mean by a servername directive?
How do I download apache web server?
How to put log level in debug mode?
What is apache scoreboard?
What is apachectl?
What are the features of apache web server?
Which module is required to have redirection possible?
Can I serve content out of a directory other than the documentroot directory?
How does apache make money?
What we can do to find out how people are reaching your site?