Tim wrote:
On Tue, 2006-06-20 at 11:11 +0100, Paul Howarth wrote:
They should be owned by whoever will be editing them, as Arthur said. If
nobody's going to be editing them, having them owned by root is fine.
I'd agree with that for displayable files (HTML, images, etc.). I'm not
sure about executables (CGI, etc.). There's risks with them as the root
user, and the Apache user. Is there a good/better way to employ them?
There's no problem with CGI scripts being _owned_ by root, but there
would be with _running_ them as root.
Paul.
