Package: vlogger Version: 1.1-2 Severity: wishlist The vlogger example in the man page uses a www-logs user and group, which seems to be a good precaution, rather than unnecessarily running as user root.
I think it would be good if vlogger at least had a README that discussed the potential risk of running as root, and explained the steps necessary to take to add a www-log user: adduser --firstuid 100 --home /var/log/apache2 --disabled-login www-log chown www-log /var/log/apache2 Of course this is dependent on the log root. Even better (though I don't know how this would fit into Debian), perhaps vlogger's installation could prompt to create a www-log user or something like that. Charles -- System Information: Debian Release: 3.1 APT prefers testing APT policy: (90, 'testing'), (80, 'unstable') Architecture: i386 (i686) Kernel: Linux 2.4.26-1um Locale: LANG=en_US, LC_CTYPE=en_US (charmap=ISO-8859-1) Versions of packages vlogger depends on: ii libtimedate-perl 1.1600-4 Time and date functions for Perl ii perl 5.8.4-6 Larry Wall's Practical Extraction -- no debconf information -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
