3 ms·
No. /etc/passwd is world-readable by necessity. /etc/shadow should only be readable by root. Your webserver should not be running as root.
by nknighthb 12y ago
No. /etc/passwd is world-readable by necessity. /etc/shadow should only be readable by root. Your webserver should not be running as root.
- wut42 12y agoOh! It makes sense. :)