请问apache 的2个问题

linpc

请问apache中使用nobody与deamon用户启动的安全性哪个比较好呢?



一个朋友说: 如果apache的进程所属用户是daemon。那么入侵者就可以通过侵入apache，获得同样属于daemon的进程


还有就是，怎么本机会一直访问aowan.com这个域名的根目录呢？？
Apache Server Status for
Server Version: Apache/2.2.0 (Unix) PHP/5.1.1
Server Built: Jan 9 2006 17:49:31

Srv PID Acc M CPU  SS Req Conn Child Slot Client VHost Request
0-0 7278 0/6/67 _  0.02 9 327 0.0 0.08 1.95  222.170.103.186 aaa.com GET /simli/admin/ewebeditor/uploadfile/20070814231419435.jpg HT
1-0 - 0/0/86 .  0.01 7 3 0.0 0.00 1.28  127.0.0.1 aowan.com GET / HTTP/1.0
2-0 7224 0/21/111 _  0.33 8 0 0.0 0.08 1.21  65.55.210.42 aaaa.com GET /admin/uploadfile/000077723_00001.temp0001.htm HTTP/1.0
3-0 7327 0/0/94 _  0.01 16 3 0.0 0.00 1.76  127.0.0.1 aowan.com GET / HTTP/1.0
4-0 7328 0/0/77 _  0.04 15 2 0.0 0.00 0.59  127.0.0.1 aowan.com GET / HTTP/1.0
5-0 7289 0/4/75 _  0.20 5 33 0.0 0.05 1.55  65.55.210.37 aaaa.com GET /simli/bbs_topics.php?bt_id=264 HTTP/1.0
6-0 7329 0/0/106 _  0.01 15 2 0.0 0.00 3.23  127.0.0.1 aowan.com GET / HTTP/1.0
7-0 - 0/0/89 .  0.09 6 2 0.0 0.00 0.91  127.0.0.1 aowan.com GET / HTTP/1.0
8-0 7330 0/0/118 _  0.52 14 2 0.0 0.00 27.74  127.0.0.1 aowan.com GET / HTTP/1.0
9-0 7331 0/0/78 _  0.01 14 3 0.0 0.00 1.64  127.0.0.1 aowan.com GET / HTTP/1.0
10-0 7295 0/7/70 _  0.06 13 0 0.0 0.08 0.45  61.135.163.80 aaa.com HEAD /simli/userimage/rmd/200708151139196569.jpg HTTP/1.0
11-0 7332 0/0/67 _  0.01 14 3 0.0 0.00 0.43  127.0.0.1 aowan.com GET / HTTP/1.0
12-0 - 0/0/78 .  0.00 5 3 0.0 0.00 0.93  127.0.0.1 aowan.com GET / HTTP/1.0

[ 本帖最后由 linpc 于 2007-11-14 15:08 编辑 ]