przemolicc at poczta.fm wrote: > I have already done that: > bash-3.00# grep PidFile /etc/apache2/httpd.conf > # PidFile: The file in which the server should record its process > #PidFile /var/run/apache2/httpd.pid > PidFile /var/apache2/run/httpd.pid > bash-3.00# ls -al /var/apache2/ > total 26 > drwxr-xr-x 10 webservd webservd 512 Mar 2 10:45 . > drwxr-xr-x 42 root sys 1024 Jan 9 13:02 .. > drwxr-xr-x 2 webservd webservd 512 Dec 8 09:47 build > drwxr-xr-x 2 webservd webservd 512 Dec 8 09:47 cgi-bin > drwxr-xr-x 3 webservd webservd 1024 Dec 8 09:47 error > drwxr-xr-x 2 webservd webservd 1024 Dec 18 10:02 htdocs > drwxr-xr-x 3 webservd webservd 3584 Nov 13 13:46 icons > drwxr-xr-x 2 webservd webservd 512 Mar 2 13:37 logs > drwxr-xr-x 2 webservd webservd 512 Sep 4 13:01 proxy > drwxr-xr-x 2 webservd webservd 512 Mar 2 13:40 run
Looks fine. One general point though, personally I would recommend using a different account for the cgi-bin and htdocs directories from the account that httpd actually runs as. However it really depends on your needs. >> Failing that try using the privdebug tool and reading the blueprint on >> privilege debuging. > > I have added the following line to /etc/user_attr > > bash-3.00# grep webservd /etc/user_attr > webservd::::type=normal;defaultpriv=basic,net_privaddr > > and it works now. But when I remove the line it still works (surprise !) That line wouldn't be used by SMF only by su. > Is missing 'svcadm refresh apache2' suspected of the problem ? It might be. I'd highly recommend a full reboot just to be sure, the main reason for suggesting this is because of the original use of tmpfs filesystems for things like the pid file. -- Darren J Moffat