On Wed, May 6, 2015 at 6:52 AM, Ralph Bean <rbean(a)redhat.com> wrote:
Excellent find!
Changing everything to run as apache raises a flag for me, though. If
we just add the masher user to the apache group, would that give us
the same benefit without all the re-organization work? Then we could:
1) continue to isolate things from the apache user that only the
masher user should access
For the isolation portion, it might be that koji should be run as a
different user so that it writes things out as a different user than
apache. We do that for most of our other web apps.
-Toshio