Here's something important for file ownership on web servers:

The user that the web server runs as should not own anything that the webserver serves.

This means that the web server's user shouldn't own anything under thedocument root or in CGI areas, and there shouldn't be any writeabledirectories under either that it can use to put things in. Stronglyresist the temptation to have CGIs write data files under the CGI areaor in the docroot, even if they are normally blocked from being

For a long time, whenever we installed systems we didn't bother to beterribly specific about where they were located, which generally comesup when you get asked about time zones. For example, a lot of thingsdefault to 'America/New York', and since that's in the Eastern timezone a lot of the time we said 'sure, whatever' and went on.

The recent American DST rule change illustrates that this is nowhazardous; it is now important to actually be specific about

Many years ago, I went to a talk about a new object oriented operatingsystem (a research project, obviously). The presenter made a big dealabout how everything in, eg, their filesystem was an object, and sothings were very general and you could put anything in the directoryobjects, and as they went on I noticed something disturbing: while youcould put all those different things into directories, none of themseemed to have the same set of methods; in fact, the methods wereoften significantly

This week, we:

• got 11,321 messages from 292 different IP addresses.
• handled 18,443 sessions from 1,247 different IP addresses.
• received 176,017 connections from at least 61,753 different IPaddresses.
• hit a highwater of 7 connections being checked at once.

This is slightly up from last week ,especially the number of different IP addresses hitting us.The drop in email messages may be because we'