From 4cd01c52d211036b3eff7da5039db463296ee565 Mon Sep 17 00:00:00 2001
From: Daniel Gruno
Date: Tue, 29 May 2012 17:51:50 +0000
Subject: [PATCH] xforms
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1343879 13f79535-47bb-0310-9956-ffa450edef68
---
docs/manual/mod/mod_log_forensic.html.en | 6 +++++-
docs/manual/mod/mod_log_forensic.xml.ja | 2 +-
docs/manual/mod/mod_log_forensic.xml.meta | 2 +-
docs/manual/mod/mod_log_forensic.xml.tr | 2 +-
4 files changed, 8 insertions(+), 4 deletions(-)
diff --git a/docs/manual/mod/mod_log_forensic.html.en b/docs/manual/mod/mod_log_forensic.html.en
index f7d34d03405..d9caf4d4482 100644
--- a/docs/manual/mod/mod_log_forensic.html.en
+++ b/docs/manual/mod/mod_log_forensic.html.en
@@ -109,6 +109,10 @@ version 2.1
document for details on why your security could be compromised
if the directory where logfiles are stored is writable by
anyone other than the user that starts the server.
+ The log files may contain sensitive data such as the contents of
+ Authorization:
headers (which can contain passwords), so
+ they should not be readable by anyone except the user that starts the
+ server.
@@ -164,7 +168,7 @@ version 2.1
Notice:This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our
mailing lists.