Using the user nobody (or similar accounts on other systems like

nouser) violates the purpose of that user.  User nobody exists
specifically as a user that no process runs as and that owns no files
on disk.  Same for nogroup.

The user and group daemon are the generic system services user and
group.  Use those instead.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@220032 13f79535-47bb-0310-9956-ffa450edef68

diff --git a/docs/conf/httpd.conf.in b/docs/conf/httpd.conf.in
index 286b20dbb4aceb06539fb9a7a9fab84668c6bd5c..cc5c22e93b252b208ae926cf7a5487f01c515402 100644 (file)
--- a/docs/conf/httpd.conf.in
+++ b/docs/conf/httpd.conf.in
@@ -60,15 +60,11 @@ Listen @@Port@@
 # httpd as root initially and it will switch.  
 #
 # User/Group: The name (or #number) of the user/group to run httpd as.
-#  . On SCO (ODT 3) use "User nouser" and "Group nogroup".
-#  . On HPUX you may not be able to use shared memory as nobody, and the
-#    suggested workaround is to create a user www and use that user.
-#  NOTE that some kernels refuse to setgid(Group) or semctl(IPC_SET)
-#  when the value of (unsigned)Group is above 60000; 
-#  don't use Group #-1 on these systems!
-#
-User nobody
-Group #-1
+# It is usually good practice to create a dedicated user and group for
+# running httpd, as with most system services.
+#
+User daemon
+Group daemon
 </IfModule>
 </IfModule>