You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@httpd.apache.org by bh...@pobox.com on 1998/06/16 03:33:32 UTC

[PATCH] Cross ref User and CacheRoot

Ah users.

$ cvs diff -u
cvs server: Diffing .
Index: core.html
===================================================================
RCS file: /cvs/apache-1.3/htdocs/manual/mod/core.html,v
retrieving revision 1.123
diff -u -r1.123 core.html
--- core.html	1998/06/08 16:25:36	1.123
+++ core.html	1998/06/16 01:31:42
@@ -2794,7 +2794,10 @@
 similarly, the user should not be able to execute code which is not
 meant for httpd requests. It is recommended that you set up a new user and
 group specifically for running the server. Some admins use user
-<CODE>nobody</CODE>, but this is not always possible or desirable.<P>
+<CODE>nobody</CODE>, but this is not always possible or desirable.
+For example mod_proxy's cache, when enabled, must be accessible to this user
+(see the <A href=mod_proxy.html#cacheroot><CODE>CacheRoot</CODE></a> 
+directive</a>).<P>
 
 Notes: If you start the server as a non-root user, it will fail to change
 to the lesser privileged user, and will instead continue to run as
Index: mod_proxy.html
===================================================================
RCS file: /cvs/apache-1.3/htdocs/manual/mod/mod_proxy.html,v
retrieving revision 1.39
diff -u -r1.39 mod_proxy.html
--- mod_proxy.html	1998/06/08 19:05:15	1.39
+++ mod_proxy.html	1998/06/16 01:31:43
@@ -583,7 +583,8 @@
 Apache 1.1 and later.<P>
 
 Sets the name of the directory to contain cache files; this must be
-writable by the httpd server.<BR>
+writable by the httpd server 
+(see the <A href=core.html#user><CODE>User</CODE></a> directive</a>).<BR>
 Setting <CODE>CacheRoot</CODE> enables proxy cacheing; without defining
 a <CODE>CacheRoot</CODE>, proxy functionality will be available
 if <CODE>ProxyRequests</CODE> are set to <CODE>On</CODE>, but no

Re: [PATCH] Cross ref User and CacheRoot

Posted by Brian Behlendorf <br...@hyperreal.org>.
Good idea, it's been committed.

	Brian

At 09:33 PM 6/15/98 -0400, bhyde@pobox.com wrote:
>Ah users.
>
>$ cvs diff -u
>cvs server: Diffing .
>Index: core.html
>===================================================================
>RCS file: /cvs/apache-1.3/htdocs/manual/mod/core.html,v
>retrieving revision 1.123
>diff -u -r1.123 core.html
>--- core.html	1998/06/08 16:25:36	1.123
>+++ core.html	1998/06/16 01:31:42
>@@ -2794,7 +2794,10 @@
> similarly, the user should not be able to execute code which is not
> meant for httpd requests. It is recommended that you set up a new user and
> group specifically for running the server. Some admins use user
>-<CODE>nobody</CODE>, but this is not always possible or desirable.<P>
>+<CODE>nobody</CODE>, but this is not always possible or desirable.
>+For example mod_proxy's cache, when enabled, must be accessible to this user
>+(see the <A href=mod_proxy.html#cacheroot><CODE>CacheRoot</CODE></a> 
>+directive</a>).<P>
> 
> Notes: If you start the server as a non-root user, it will fail to change
> to the lesser privileged user, and will instead continue to run as
>Index: mod_proxy.html
>===================================================================
>RCS file: /cvs/apache-1.3/htdocs/manual/mod/mod_proxy.html,v
>retrieving revision 1.39
>diff -u -r1.39 mod_proxy.html
>--- mod_proxy.html	1998/06/08 19:05:15	1.39
>+++ mod_proxy.html	1998/06/16 01:31:43
>@@ -583,7 +583,8 @@
> Apache 1.1 and later.<P>
> 
> Sets the name of the directory to contain cache files; this must be
>-writable by the httpd server.<BR>
>+writable by the httpd server 
>+(see the <A href=core.html#user><CODE>User</CODE></a> directive</a>).<BR>
> Setting <CODE>CacheRoot</CODE> enables proxy cacheing; without defining
> a <CODE>CacheRoot</CODE>, proxy functionality will be available
> if <CODE>ProxyRequests</CODE> are set to <CODE>On</CODE>, but no
>
>
--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--
pure chewing satisfaction                                  brian@apache.org
                                                        brian@hyperreal.org