lawrence@lemmy.worldM to Comic Strips@lemmy.world · 2 years agoLinux processeslemmy.worldimagemessage-square37linkfedilinkarrow-up1442arrow-down112
arrow-up1430arrow-down1imageLinux processeslemmy.worldlawrence@lemmy.worldM to Comic Strips@lemmy.world · 2 years agomessage-square37linkfedilink
minus-squareRexelpitlum@discuss.tchncs.delinkfedilinkarrow-up18·2 years ago/var/log has been deleted, you say… I think we all know what this means, don’t we?
minus-squareRexelpitlum@discuss.tchncs.delinkfedilinkarrow-up12·2 years ago Hint ls -ld /var/log drwxrwxr-x 18 root syslog 4096 Aug 11 08:13 /var/log
minus-squarehemko@lemmy.dbzer0.comlinkfedilinkEnglisharrow-up6·2 years agoThat seems so obvious I think we’re missing something
minus-squareRexelpitlum@discuss.tchncs.delinkfedilinkarrow-up7·2 years agoWhatever, we have a suspect. Bring in GDB to do the interrogation! And perhaps also call Nice, he can play the good cop…
minus-squarehemko@lemmy.dbzer0.comlinkfedilinkEnglisharrow-up5·2 years agoForgive me my ignorance, but since Apache is running as root, couldn’t PHP inherit it’s permissions?
minus-squarelawrence@lemmy.worldOPMlinkfedilinkarrow-up5·2 years agoThe Apache main process runs as root. When it receives a request, it spawns a child process that doesn’t run as root. PHP runs as the same user as the Apache child process.
minus-squarejollyrogue@lemmy.mllinkfedilinkarrow-up4·2 years agoOr PHP runs in its own fastcgi like process under a different account.
/var/log has been deleted, you say…
I think we all know what this means, don’t we?
Hint
ls -ld /var/log drwxrwxr-x 18 root syslog 4096 Aug 11 08:13 /var/logThat seems so obvious I think we’re missing something
Whatever, we have a suspect.
Bring in GDB to do the interrogation! And perhaps also call Nice, he can play the good cop…
Forgive me my ignorance, but since Apache is running as root, couldn’t PHP inherit it’s permissions?
The Apache main process runs as root. When it receives a request, it spawns a child process that doesn’t run as root. PHP runs as the same user as the Apache child process.
Or PHP runs in its own fastcgi like process under a different account.