Apache server permisssions

[Boulytchev, Vasiliy]

Ladies and Gents,
	Imagine the following scenario.  I have Apache 2.blah running as
nobody.nobody (httpd.conf).  Now I have 2 virtual hosts, sarah and john.
The users and groups are sarah.sarah and john.john.  
	My first question, is why can apache serve a file, whose permissions
are root.root?
	Second, is it safe to have a server setup like the above, without
jailing?

Vasiliy Boulytchev
Colorado Information Technologies, Inc.
http://www.coinfotech.com
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 4355 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/redhat-list/attachments/20040303/4fc08f46/attachment.bin>