mirror of
https://github.com/apache/httpd.git
synced 2025-11-03 17:53:20 +03:00
931cdd59ae
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1054597 13f79535-47bb-0310-9956-ffa450edef68
187 lines
11 KiB
XML
187 lines
11 KiB
XML
<?xml version="1.0" encoding="ISO-8859-1"?>
|
|
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
|
|
<html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head><!--
|
|
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
|
|
This file is generated from xml source: DO NOT EDIT
|
|
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
|
|
-->
|
|
<title>mod_unixd - Apache HTTP Server</title>
|
|
<link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
|
|
<link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
|
|
<link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" />
|
|
<link href="../images/favicon.ico" rel="shortcut icon" /></head>
|
|
<body>
|
|
<div id="page-header">
|
|
<p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="../faq/">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p>
|
|
<p class="apache">Apache HTTP Server Version 2.3</p>
|
|
<img alt="" src="../images/feather.gif" /></div>
|
|
<div class="up"><a href="./"><img title="<-" alt="<-" src="../images/left.gif" /></a></div>
|
|
<div id="path">
|
|
<a href="http://www.apache.org/">Apache</a> > <a href="http://httpd.apache.org/">HTTP Server</a> > <a href="http://httpd.apache.org/docs/">Documentation</a> > <a href="../">Version 2.3</a> > <a href="./">Modules</a></div>
|
|
<div id="page-content">
|
|
<div id="preamble"><h1>Apache Module mod_unixd</h1>
|
|
<div class="toplang">
|
|
<p><span>Available Languages: </span><a href="../en/mod/mod_unixd.html" title="English"> en </a> |
|
|
<a href="../tr/mod/mod_unixd.html" hreflang="tr" rel="alternate" title="Türkçe"> tr </a></p>
|
|
</div>
|
|
<table class="module"><tr><th><a href="module-dict.html#Description">Description:</a></th><td>Basic (required) security for Unix-family platforms.</td></tr>
|
|
<tr><th><a href="module-dict.html#Status">Status:</a></th><td>Base</td></tr></table>
|
|
</div>
|
|
<div id="quickview"><h3 class="directives">Directives</h3>
|
|
<ul id="toc">
|
|
<li><img alt="" src="../images/down.gif" /> <a href="#chrootdir">ChrootDir</a></li>
|
|
<li><img alt="" src="../images/down.gif" /> <a href="#group">Group</a></li>
|
|
<li><img alt="" src="../images/down.gif" /> <a href="#suexec">Suexec</a></li>
|
|
<li><img alt="" src="../images/down.gif" /> <a href="#user">User</a></li>
|
|
</ul>
|
|
<h3>See also</h3>
|
|
<ul class="seealso">
|
|
<li><a href="../suexec.html">suEXEC support</a></li>
|
|
</ul></div>
|
|
|
|
<div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
|
|
<div class="directive-section"><h2><a name="ChrootDir" id="ChrootDir">ChrootDir</a> <a name="chrootdir" id="chrootdir">Directive</a></h2>
|
|
<table class="directive">
|
|
<tr><th><a href="directive-dict.html#Description">Description:</a></th><td>Directory for apache to run chroot(8) after startup.</td></tr>
|
|
<tr><th><a href="directive-dict.html#Syntax">Syntax:</a></th><td><code>ChrootDir <var>/path/to/directory</var></code></td></tr>
|
|
<tr><th><a href="directive-dict.html#Default">Default:</a></th><td><code>none</code></td></tr>
|
|
<tr><th><a href="directive-dict.html#Context">Context:</a></th><td>server config</td></tr>
|
|
<tr><th><a href="directive-dict.html#Status">Status:</a></th><td>Base</td></tr>
|
|
<tr><th><a href="directive-dict.html#Module">Module:</a></th><td><code class="module"><a href="../mod/mod_unixd.html">mod_unixd</a></code></td></tr>
|
|
<tr><th><a href="directive-dict.html#Compatibility">Compatibility:</a></th><td>Available in Apache 2.2.10 and later</td></tr>
|
|
</table>
|
|
<p>This directive tells the server to <var>chroot(8)</var> to the
|
|
specified directory after startup, but before accepting requests
|
|
over the 'net.</p>
|
|
<p>Note that running the server under chroot is not simple,
|
|
and requires additional setup, particularly if you are running
|
|
scripts such as CGI or PHP. Please make sure you are properly
|
|
familiar with the operation of chroot before attempting to use
|
|
this feature.</p>
|
|
|
|
</div>
|
|
<div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
|
|
<div class="directive-section"><h2><a name="Group" id="Group">Group</a> <a name="group" id="group">Directive</a></h2>
|
|
<table class="directive">
|
|
<tr><th><a href="directive-dict.html#Description">Description:</a></th><td>Group under which the server will answer
|
|
requests</td></tr>
|
|
<tr><th><a href="directive-dict.html#Syntax">Syntax:</a></th><td><code>Group <var>unix-group</var></code></td></tr>
|
|
<tr><th><a href="directive-dict.html#Default">Default:</a></th><td><code>Group #-1</code></td></tr>
|
|
<tr><th><a href="directive-dict.html#Context">Context:</a></th><td>server config</td></tr>
|
|
<tr><th><a href="directive-dict.html#Status">Status:</a></th><td>Base</td></tr>
|
|
<tr><th><a href="directive-dict.html#Module">Module:</a></th><td>mod_unixd</td></tr>
|
|
<tr><th><a href="directive-dict.html#Compatibility">Compatibility:</a></th><td>Only valid in global server config since Apache
|
|
2.0</td></tr>
|
|
</table>
|
|
<p>The <code class="directive">Group</code> directive sets the group under
|
|
which the server will answer requests. In order to use this
|
|
directive, the server must be run initially as <code>root</code>. If
|
|
you start the server as a non-root user, it will fail to change to the
|
|
specified group, and will instead continue to run as the group of the
|
|
original user. <var>Unix-group</var> is one of:</p>
|
|
|
|
<dl>
|
|
<dt>A group name</dt>
|
|
<dd>Refers to the given group by name.</dd>
|
|
|
|
<dt><code>#</code> followed by a group number.</dt>
|
|
<dd>Refers to a group by its number.</dd>
|
|
</dl>
|
|
|
|
<div class="example"><h3>Example</h3><p><code>
|
|
Group www-group
|
|
</code></p></div>
|
|
|
|
<p>It is recommended that you set up a new group specifically for
|
|
running the server. Some admins use user <code>nobody</code>,
|
|
but this is not always possible or desirable.</p>
|
|
|
|
<div class="warning"><h3>Security</h3>
|
|
<p>Don't set <code class="directive">Group</code> (or <code class="directive"><a href="#user">User</a></code>) to <code>root</code> unless
|
|
you know exactly what you are doing, and what the dangers are.</p>
|
|
</div>
|
|
|
|
|
|
<h3>See also</h3>
|
|
<ul>
|
|
<li><code class="directive"><a href="../mod/mod_privileges.html#vhostgroup">VHostGroup</a></code></li>
|
|
<li><code class="directive"><a href="../mod/mod_suexec.html#suexecusergroup">SuexecUserGroup</a></code></li>
|
|
</ul>
|
|
</div>
|
|
<div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
|
|
<div class="directive-section"><h2><a name="Suexec" id="Suexec">Suexec</a> <a name="suexec" id="suexec">Directive</a></h2>
|
|
<table class="directive">
|
|
<tr><th><a href="directive-dict.html#Description">Description:</a></th><td>Enable or disable the suEXEC feature</td></tr>
|
|
<tr><th><a href="directive-dict.html#Syntax">Syntax:</a></th><td><code>Suexec On|Off</code></td></tr>
|
|
<tr><th><a href="directive-dict.html#Default">Default:</a></th><td><code>On if suexec binary exists with proper owner and mode,
|
|
Off otherwise</code></td></tr>
|
|
<tr><th><a href="directive-dict.html#Context">Context:</a></th><td>server config</td></tr>
|
|
<tr><th><a href="directive-dict.html#Status">Status:</a></th><td>Base</td></tr>
|
|
<tr><th><a href="directive-dict.html#Module">Module:</a></th><td>mod_unixd</td></tr>
|
|
<tr><th><a href="directive-dict.html#Compatibility">Compatibility:</a></th><td>Available in Apache httpd 2.3.9 and later</td></tr>
|
|
</table>
|
|
<p>When On, startup will fail if the suexec binary doesn't exist
|
|
or has an invalid owner or file mode.</p>
|
|
<p>When Off, suEXEC will be disabled even if the suexec binary exists
|
|
and has a valid owner and file mode.</p>
|
|
|
|
</div>
|
|
<div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
|
|
<div class="directive-section"><h2><a name="User" id="User">User</a> <a name="user" id="user">Directive</a></h2>
|
|
<table class="directive">
|
|
<tr><th><a href="directive-dict.html#Description">Description:</a></th><td>The userid under which the server will answer
|
|
requests</td></tr>
|
|
<tr><th><a href="directive-dict.html#Syntax">Syntax:</a></th><td><code>User <var>unix-userid</var></code></td></tr>
|
|
<tr><th><a href="directive-dict.html#Default">Default:</a></th><td><code>User #-1</code></td></tr>
|
|
<tr><th><a href="directive-dict.html#Context">Context:</a></th><td>server config</td></tr>
|
|
<tr><th><a href="directive-dict.html#Status">Status:</a></th><td>Base</td></tr>
|
|
<tr><th><a href="directive-dict.html#Module">Module:</a></th><td>mod_unixd</td></tr>
|
|
<tr><th><a href="directive-dict.html#Compatibility">Compatibility:</a></th><td>Only valid in global server config since Apache
|
|
2.0</td></tr>
|
|
</table>
|
|
<p>The <code class="directive">User</code> directive sets the user ID as
|
|
which the server will answer requests. In order to use this
|
|
directive, the server must be run initially as <code>root</code>.
|
|
If you start the server as a non-root user, it will fail to change
|
|
to the lesser privileged user, and will instead continue to run as
|
|
that original user. If you do start the server as <code>root</code>,
|
|
then it is normal for the parent process to remain running as root.
|
|
<var>Unix-userid</var> is one of:</p>
|
|
|
|
<dl>
|
|
<dt>A username</dt>
|
|
<dd>Refers to the given user by name.</dd>
|
|
|
|
<dt># followed by a user number.</dt>
|
|
<dd>Refers to a user by its number.</dd>
|
|
</dl>
|
|
|
|
<p>The user should have no privileges that result in it being
|
|
able to access files that are not intended to be visible to the
|
|
outside world, and similarly, the user should not be able to
|
|
execute code that is not meant for HTTP requests. It is
|
|
recommended that you set up a new user and group specifically for
|
|
running the server. Some admins use user <code>nobody</code>, but
|
|
this is not always desirable, since the <code>nobody</code> user
|
|
can have other uses on the system.</p>
|
|
|
|
<div class="warning"><h3>Security</h3>
|
|
<p>Don't set <code class="directive">User</code> (or <code class="directive"><a href="#group">Group</a></code>) to <code>root</code> unless
|
|
you know exactly what you are doing, and what the dangers are.</p>
|
|
</div>
|
|
|
|
|
|
<h3>See also</h3>
|
|
<ul>
|
|
<li><code class="directive"><a href="../mod/mod_privileges.html#vhostuser">VHostUser</a></code></li>
|
|
<li><code class="directive"><a href="../mod/mod_suexec.html#suexecusergroup">SuexecUserGroup</a></code></li>
|
|
</ul>
|
|
</div>
|
|
</div>
|
|
<div class="bottomlang">
|
|
<p><span>Available Languages: </span><a href="../en/mod/mod_unixd.html" title="English"> en </a> |
|
|
<a href="../tr/mod/mod_unixd.html" hreflang="tr" rel="alternate" title="Türkçe"> tr </a></p>
|
|
</div><div id="footer">
|
|
<p class="apache">Copyright 2011 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
|
|
<p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="../faq/">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p></div>
|
|
</body></html> |