lighttpd: run as non-privileged user www-data
authorFloris Bos <bos@je-eigen-domein.nl>
Thu, 30 Apr 2015 16:12:16 +0000 (18:12 +0200)
committerThomas Petazzoni <thomas.petazzoni@free-electrons.com>
Fri, 1 May 2015 07:38:28 +0000 (09:38 +0200)
Previously the stock lighttpd configuration was patched to run as user root,
because we do not have a lighttpd user.
Patch it to use www-data instead, which is a user available in the default
skeleton, and is the same other webserver packages (like nginx) use.

Signed-off-by: Floris Bos <bos@je-eigen-domein.nl>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
package/lighttpd/0001-Fix-default-config-file.patch

index 88d2c6f333837996cba7bd354b45ee096e077563..bffc2a8ed3703d7e499eb8377c859b8cd59fb3c4 100644 (file)
@@ -51,8 +51,8 @@ diff -Nurp a/doc/config/lighttpd.conf b/doc/config/lighttpd.conf
  ##
 -server.username  = "lighttpd"
 -server.groupname = "lighttpd"
-+# server.username  = "lighttpd"
-+# server.groupname = "lighttpd"
++server.username  = "www-data"
++server.groupname = "www-data"
  
  ## 
  ## enable core files.