SuPHP & Apache suEXEC still seeing nobody

[raptor235]

Hi there I'm running a single server, I went through the headache of moving all the sites over to run on individual accounts to get in proper security and get rid of the nobody user. After all the work I'm still seeing the nobody user running httpd in top...

I see all my accounts as well but why is nobody still showing? Any ideas of how I could track down where these
proceses are coming from?

Thanks

 

[cPanelTristan]

Apache itself still runs as the nobody user for processes it initiates. PHP processes will run as the set user, but any Apache process (html page for example) is going to run as nobody. The only way to have all processes run as a user would be to use mod_ruid2 or MPM ITK on a machine under DSO, since these set Apache itself to run as the user for all processes.