Comment 4 for bug 1331554

Revision history for this message
Sergii Golovatiuk (sgolovatiuk) wrote :

I suppose the main reason that RadosGW shouldn't share the same user as Apache. As a sample we may switch from Apache to nginx, so patching can delete apache user.

On Centos radosgw shares the same user with httpd

On Ubuntu radosgw uses root
root 20207 0.0 0.2 1631600 5488 ? Ssl Sep09 0:52 /usr/bin/radosgw -n client.radosgw.gateway

which is quite bad for security reasons.

I think we should introduce radosgw user with own limits for CentOS and Ubuntu