giving root privilege to apache is left over from my gui, and not con…

[georgejhunt]

…sistent with Tim's console.
Discovered this because I need to give apache rights to change iptables and conntrack info -- which might in itself be a security problem. But one step at a time. The capture portal is too big a thing to take on all at once

[jvonau]

Don't think you want iptables-save, that just captures the current rules
that are already loaded. Think you would want to use iptables -I and
iptables -D to change the running rules directly. Might be best to alter a
custom named table and just use a -J(ump) to call the custom table from the
provided built-in tables.

On Fri, Jul 22, 2016 at 6:24 PM, georgejhunt notifications@github.com
wrote:

…sistent with Tim's console.
Discovered this because I need to give apache rights to change iptables
and conntrack info -- which might in itself be a security problem. But one

step at a time. The capture portal is too big a thing to take on all at once

You can view, comment on, or merge this pull request online at:

#766
Commit Summary

• giving root privilege to apache is left over from my gui, and not
  consistent with Tim's console

File Changes

• M roles/httpd/tasks/main.yml
  https://github.com/XSCE/xsce/pull/766/files#diff-0 (1)
• D roles/httpd/templates/xs-http
  https://github.com/XSCE/xsce/pull/766/files#diff-1 (1)
• D roles/httpd/templates/xs-http.j2
  https://github.com/XSCE/xsce/pull/766/files#diff-2 (1)

Patch Links:

• https://github.com/XSCE/xsce/pull/766.patch
• https://github.com/XSCE/xsce/pull/766.diff

—
You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHub
#766, or mute the thread
https://github.com/notifications/unsubscribe-auth/AFUjvqNx0x3XFRJ1EE6h2l4CNdwN9X3Kks5qYVEcgaJpZM4JTNgL
.