Gabe Martin-Dempesy
Reputation
290
Top tag
Next privilege 300 Rep.
Create new tags
Badges
4 10
Impact
~37k people reached

  • 0 posts edited
  • 0 helpful flags
  • 16 votes cast
Mar
28
awarded  Notable Question
Jan
8
awarded  Necromancer
Nov
25
awarded  Revival
Nov
14
awarded  Popular Question
Jun
7
awarded  Yearling
Apr
13
answered Vagrant shared folder and file change events
Dec
28
awarded  Necromancer
Oct
8
awarded  Critic
Sep
28
awarded  Popular Question
Dec
20
comment Giving other users write access to apache logs can result in root exploit - How does this work?
Symlinking the log to another file was definitely the answer I was looking for, and I don't know how I missed that when scanning over the security tips. My initial motivation here is having awstats process and rotate the logs, but not trusting awstats run as root. The obvious alternative here is to trust logrotate to doing the rotation, and then run awstats as a non-root user.
Dec
20
accepted Giving other users write access to apache logs can result in root exploit - How does this work?
Dec
20
comment Giving other users write access to apache logs can result in root exploit - How does this work?
The child/worker processes normally run as 'www-data' or 'apache', but there is a parent httpd process that runs as root. Also, this is not about executing scripts, but rather writing to logs.
Dec
20
asked Giving other users write access to apache logs can result in root exploit - How does this work?
Mar
2
awarded  Scholar
Mar
2
accepted Chunking large rsync transfers?
Aug
11
awarded  Supporter
Aug
11
revised How do I set up failover for a single web server using two ISPs?
added 295 characters in body
Aug
11
answered How do I set up failover for a single web server using two ISPs?
Aug
11
revised PHP eval(gzinflate(base64_decode(..))) hack - how to prevent it from occurring again?
added 233 characters in body
Aug
11
answered PHP eval(gzinflate(base64_decode(..))) hack - how to prevent it from occurring again?