Re: Apache should never be a mandatory dependency

[Joerg Sonnenberger <joerg%britannica.bec.de@localhost>]

On Fri, May 16, 2014 at 10:43:31PM +0900, OBATA Akio wrote:
> Any reason APACHE_USER/APACHE_GROUP and NGINX_USER/NGINX_GROUP must differ?
> Some packages depend on apache and set 
> WWW_USER=APACHE_USER/WWW_GROUP=APACHE_GROUP,
> then set permissions with WWW_USER/WWW_GROUP.

I think we should consolidate a WWW_GROUP, but not a user. It often
makes sense to limit accessibility for the group, e.g. for FastCGI
sockets. Nothing should run as the unprivileged web server user though.

Joerg