Security Question

Luciano Miguel Ferreira Rocha strange at nsk.no-ip.org
Mon Feb 14 18:35:01 UTC 2005


On Mon, Feb 14, 2005 at 07:28:57PM +0100, Ralf Ertzinger wrote:
> Hi.
> 
> Scott Becker <scottb at bxwa.com> wrote:
> 
> > My apache account is active so I can su to it to administer postgresql
> > databases accessable via php scripts.
> 
> You do not need a password for that, or change anything about the
> account.
> 
> "sudo -u apache" (as normal user) or just "su -m apache" (as root) ought
> to do the job.

Or just psql -U apache.

And login with empty passwords can be disabled by removing nullok from
/etc/pam.d/system-auth.

> 
> -- 
> "Your reality, sir, is lies and balderdash and I am delighted to say
> that I have no grasp of it whatsoever."  -- Baron Munchausen
> 
> -- 
> fedora-devel-list mailing list
> fedora-devel-list at redhat.com
> http://www.redhat.com/mailman/listinfo/fedora-devel-list

-- 
4/11




More information about the fedora-devel-list mailing list