Starting httpd-perl: Error:Apache has not been designed to serve pages while root ???

[bruce1271]

I was running fine until I rebooted and go this error. What is this??? How do I fix?


Starting httpd-perl: Error: Apache has not been designed to serve pages while
running as root. There are known race conditions that
will allow any local user to read any file on the system.
If you still desire to serve pages as root then
add -DBIG_SECURITY_HOLE to the EXTRA_CFLAGS line in your
src/Configuration file and rebuild the server. It is
strongly suggested that you instead modify the User
directive in your httpd.conf file to list a non-root
user.
[FAILED]

[bruce1271]

I had made a super user and apache did not likethat when i restarted it?? Dont understnad it, but I removed the super user.

[Craig McPherson]

Out of curiosity, why are you running Apache-Perl? The normal Apache can run Perl scripts just fine as CGI scripts. Apache-Perl is known to be very, very unsecure.

[Sweede]

in the httpd.conf, change the User and Group directives to a NON-Root user.

[bruce1271]

To be homest with you...I dont know. I thought they were one in the same. Only one conf and all that. When I do apachetl start they both start! How do I only use one?

[freebsd]

What was your reason for running Apache with root user? If you wanted to run scripts to administer your system that require root access, run those scripts suid root, never run Apache as root. If you need to to some tasks as non Apache user other than root, recompile Apache and enable suEXEC or recompile Perl and enable suidperl or you can even take advantage of sudo.
Anyhow, you don't seem to know much about Apache and UNIX, so it's better off for you not enable this kind of stuffs.

[Craig McPherson]

I'd recommend you just uninstall Apache-Perl if you don't have a reason to use it. And yeah, don't run Apache as root.

[bruce1271]

To be honest with you...It run everything as root. I know I know. I tried to not do it, but it seems like I cant do anything without it. How do I get away from that? All my stuff comes up at boot-up ready to go. How do I change user when the machine boots up with eveything in place? Please, give me some pointers on this subject. Much appreciated you guys!!!

Have a great week ahead.

[freebsd]

>> How do I change user when the machine boots up with eveything in place?

Asking this question tells me you really know nothing about Apache at all. It's strongly recommended that you don't try to run Apache as root user again.
To answer your question, just edit your httpd.conf and run /path/to/apachectl graceful. On next reboot, the user should be changed to your new one permanently.

[bruce1271]

Your right I do know nothing about it. But I have managed to get it to work in a day and I have only been messing with it for a little over a week. So, I dont think I am doing too too bad. thanks