From: Ryan Bloom Date: Thu, 5 Jul 2001 04:27:56 +0000 (+0000) Subject: Add documentation for mod_suexec. And add a note in the old docs X-Git-Tag: 2.0.20~19 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=f48c2e8363ca1c671e9447b8506cd68133c84f5c;p=thirdparty%2Fapache%2Fhttpd.git Add documentation for mod_suexec. And add a note in the old docs about User that SuexecUserGroup now replaces putting User/Group directives inside of VirtualHosts. PR: 7634 git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@89499 13f79535-47bb-0310-9956-ffa450edef68 --- diff --git a/docs/manual/mod/index-bytype.html b/docs/manual/mod/index-bytype.html index ec4c623f560..d58de73601d 100644 --- a/docs/manual/mod/index-bytype.html +++ b/docs/manual/mod/index-bytype.html @@ -136,6 +136,8 @@ virtual hosts under different userids.
Windows ISAPI Extension support
mod_ext_filter
Filtering content with external programs. +
mod_suexec +
Run CGI requests as a specified user and group.

Internal Content Handlers

diff --git a/docs/manual/mod/index.html b/docs/manual/mod/index.html index 5e7b2f8b0eb..b19aee9a393 100644 --- a/docs/manual/mod/index.html +++ b/docs/manual/mod/index.html @@ -118,6 +118,8 @@ virtual hosts under different userids.
Automatically correct minor typos in URLs
mod_status
Server status display +
mod_suexec +
Run CGI requests as a specified user and group.
mod_userdir
User home directories.
mod_unique_id diff --git a/docs/manual/mod/mod_suexec.html b/docs/manual/mod/mod_suexec.html new file mode 100644 index 00000000000..0910999f1ae --- /dev/null +++ b/docs/manual/mod/mod_suexec.html @@ -0,0 +1,95 @@ + + + +Apache module mod_suexec + + + + + +

Module mod_suexec

+ +

+This module provides support for +running CGI scripts as a specified User and Group. +

+ +

Status: Extension +
+Source File: mod_suexec.c +
+Module Identifier: suexec_module +
+Compatibility: Available in Apache 2.0 and later. +

+ +

Summary

+ +

This module allows CGI scripts to run as a specified user and Group.

+ +

Directives

+ + +

SuexecUserGroup directive

+

+Syntax: SuexecUserGroup User Group
+Default: None
+Context: server config, virtual host
+Status: Extension
+Module: mod_suexec
+Compatibility: SuexecUserGroup is only available in 2.0 and later.

+

+The SuexecUserGroup directive allows you to specify a user and +group for CGI programs to run as. Non-CGI requests are still processes +with the user specified in the User directive. This directive replaces +using the User and Group directives inside of VirtualHosts. +

+
+ +

+ Apache HTTP Server Version 2.0 +

+ +Index +Home + + + diff --git a/docs/manual/mod/mpm_common.html b/docs/manual/mod/mpm_common.html index 3ac8d0122a8..39c629e7fac 100644 --- a/docs/manual/mod/mpm_common.html +++ b/docs/manual/mod/mpm_common.html @@ -145,11 +145,10 @@ Note: if you start the server as a non-root user, it will fail to change to the specified group, and will instead continue to run as the group of the original user.

-Special note: Use of this directive in <VirtualHost> requires a -properly configured suEXEC wrapper. -When used inside a <VirtualHost> in this manner, only the group -that CGIs are run as is affected. Non-CGI requests are still processed -as the group specified in the main Group directive.

+Special note: Use of this directive in <VirtualHost< is no longer +supported. To implement the suEXEC wrapper +with Apache 2.0, use the +SuexecUserGroup directive. SECURITY: See User for a discussion of the security considerations.

@@ -759,11 +758,9 @@ to the lesser privileged user, and will instead continue to run as that original user. If you do start the server as root, then it is normal for the parent process to remain running as root.

-Special note: Use of this directive in <VirtualHost> requires a -properly configured suEXEC wrapper. -When used inside a <VirtualHost> in this manner, only the user -that CGIs are run as is affected. Non-CGI requests are still processed -with the user specified in the main User directive.

+Special note: Use of this directive in <VirtualHost> is no longer +supported. To configure your server for +suexec use SuexecUserGroup. SECURITY: Don't set User (or Group) to root unless you know exactly what you are doing, and what the