On Fri, Sep 21, 2012 at 03:09:50PM +0000, Lazar, Alexey Vladimirovich wrote: > Dan, that's good to know, thank you. I also found your blog post [1] > interesting and informative. I guess, I was kind of curious why Apache had to > run as opensrf, but not curious enough to ask. > > Thinking strategically, fewer barriers and more documentation for running > Evergreen on various Linux distributions is a plus, but like you say, return > on investment is a consideration. I think any steps in that direction, like > your work with SELinux, are helpful though. > > So, why does Apache have to run as opensrf user?
It doesn't have to, which is why we should change the instructions and defaults accordingly. Long story short, it wants to write logs to /openils/var/log which is owned by the opensrf user, but we can default to syslog and avoid that problem.
