<html><head><meta http-equiv="Content-Type" content="text/html charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><br><div><div>On 18 Apr 2013, at 13:19, Richard Livsey <<a href="mailto:richard@livsey.org">richard@livsey.org</a>> wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><span style="font-family: Helvetica; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; display: inline !important; float: none; ">Ah yes you're right, I misread section 6.11.4 [1] and it's only nobody if user switching to the owner of<span class="Apple-converted-space"> </span></span><a href="http://config.ru/" style="font-family: Helvetica; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; ">config.ru</a><span style="font-family: Helvetica; font-size: medium; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; display: inline !important; float: none; "><span class="Apple-converted-space"> </span>/ environment.rb fails [2]</span></blockquote></div><br><div>Or just set PassengerUser in the Apache config.</div><div><br></div><div>My 2p on the user deployment thing FWIW. If you require any kind of compliance you will likely find that multiple users sharing a deployment login causes you problems. Most compliance frameworks mandate individual logins. We can debate the real world security gain this gives you if you like but stuff like PCI DSS for example is quite explicit.</div><div><br></div><div>Marc</div></body></html>