|
Lee Brown
administrator at leebrown.org
Thu Sep 15 00:52:20 EDT 2005
Greetings! Under WindowsXP, you can run Apache as a stand-alone executable or as a system process (a 'daemon,' for you penguin-floggers). If run as a stand-alone, it inherits the priviledges of the current user unless you configure 'run as' (sorta like suid) to run it under a different user. Security issues? You bet! If you run it as a system process, by default it will run under the built-in pseudo-user 'system.' This is very, very bad as 'system' has priviledges to everywhere and everything and then some. Just as with the stand-alone, you can set up the system process to run under another user. I have a user named 'webserver' under which Apache runs; this gives me fine-grained control over its priviledges. Getting back to the main point, under Windows it's the same as under Linux: whatever user the server happens to be running as needs the appropriate permissions for the resource in question. Best Regards, Lee E. Brown (administrator at leebrown.org) -----Original Message----- From: mod_python-bounces at modpython.org [mailto:mod_python-bounces at modpython.org] On Behalf Of Jorey Bump Sent: Wednesday, September 14, 2005 4:22 PM To: mod_python at modpython.org Subject: Re: [mod_python] PythonImport: Can someone please draw a diagramfor this idiot? jamestmcneill-python at yahoo.co.uk wrote: > 3) From this I can see that the PythonImport directive doesn't seem to > be working at all (or at least, in any way I expected it to). It does > not produce a compiled version of the module specified, This is not unusual. The user that apache runs as must have write permissions in the directory in order to produce a .pyc file. I'm not sure what happens under Windows regarding this, but if I want a compiled version of the module under Linux, I compile it ahead of time or change the permissions (rarely). _______________________________________________ Mod_python mailing list Mod_python at modpython.org http://mailman.modpython.org/mailman/listinfo/mod_python
|