Mailing List Archive

cvs commit: apache/htdocs/manual/mod core.html
marc 97/04/22 08:53:10

Modified: htdocs/manual/mod core.html
Log:
Clarify that the User and Group directives in VirtualHosts only apply
to CGIs.

Closes PR#341.

Revision Changes Path
1.49 +8 -2 apache/htdocs/manual/mod/core.html

Index: core.html
===================================================================
RCS file: /export/home/cvs/apache/htdocs/manual/mod/core.html,v
retrieving revision 1.48
retrieving revision 1.49
diff -C3 -r1.48 -r1.49
*** core.html 1997/04/21 20:36:31 1.48
--- core.html 1997/04/22 15:53:08 1.49
***************
*** 506,512 ****
original user. <p>

Special note: Use of this directive in &lt;VirtualHost&gt; requires a
! properly configured <A HREF="../suexec.html">SUEXEC wrapper</A>.<p>

SECURITY: See <A HREF="#user">User</A> for a discussion of the security
considerations.<p><hr>
--- 506,515 ----
original user. <p>

Special note: Use of this directive in &lt;VirtualHost&gt; requires a
! properly configured <A HREF="../suexec.html">suEXEC wrapper</A>.
! When used inside a &lt;VirtualHost&gt; in this manner, only the group
! that CGIs are run as is affected. Non-CGI requests are still processed
! as the group specified in the main Group directive.<p>

SECURITY: See <A HREF="#user">User</A> for a discussion of the security
considerations.<p><hr>
***************
*** 1291,1297 ****
for the parent process to remain running as root.<p>

Special note: Use of this directive in &lt;VirtualHost&gt; requires a
! properly configured <A HREF="../suexec.html">SUEXEC wrapper</A>.<p>

SECURITY: Don't set User (or <A HREF="#group">Group</A>) to
<code>root</code> unless you know exactly what you are doing, and what the
--- 1294,1303 ----
for the parent process to remain running as root.<p>

Special note: Use of this directive in &lt;VirtualHost&gt; requires a
! properly configured <A HREF="../suexec.html">suEXEC wrapper</A>.
! When used inside a &lt;VirtualHost&gt; in this manner, only the user
! that CGIs are run as is affected. Non-CGI requests are still processed
! with the user specified in the main User directive.<p>

SECURITY: Don't set User (or <A HREF="#group">Group</A>) to
<code>root</code> unless you know exactly what you are doing, and what the