mirror of
https://github.com/apache/httpd.git
synced 2025-08-26 05:42:34 +03:00
c09109559c
Submitted by: Marc Slemko Added documentation about security concerns with logging in Apache 1.2. git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@77404 13f79535-47bb-0310-9956-ffa450edef68
55 lines
1.8 KiB
HTML
55 lines
1.8 KiB
HTML
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
|
|
<HTML>
|
|
<HEAD>
|
|
<TITLE>Module mod_log_agent</TITLE>
|
|
</HEAD>
|
|
|
|
<BODY>
|
|
<!--#include virtual="header.html" -->
|
|
<H1>Module mod_log_agent</h1>
|
|
|
|
This module is contained in the <code>mod_log_agent.c</code> file, and is not
|
|
compiled in by default. It provides for logging of the client user agents.
|
|
|
|
|
|
<ul>
|
|
<li><A HREF="#agentlog">AgentLog</A>
|
|
</ul>
|
|
<hr>
|
|
|
|
|
|
<A name="agentlog"><h2>AgentLog</h2></A>
|
|
<!--%plaintext <?INDEX {\tt AgentLog} directive> -->
|
|
<strong>Syntax:</strong> AgentLog <em>file-pipe</em><br>
|
|
<strong>Default:</strong> <code>AgentLog logs/agent_log</code><br>
|
|
<Strong>Context:</strong> server config, virtual host<br>
|
|
<strong>Status:</strong> Extension<br>
|
|
<strong>Module:</strong> mod_log_agent<p>
|
|
|
|
The AgentLog directive sets the name of the file to which the server will
|
|
log the UserAgent header of incoming requests. <em>File-pipe</em> is one
|
|
of
|
|
<dl><dt>A filename
|
|
<dd>A filename relative to the <A HREF="core.html#serverroot">ServerRoot</A>.
|
|
<dt> `|' followed by a command
|
|
<dd>A program to receive the agent log information on its standard input.
|
|
Note the a new program will not be started for a VirtualHost if it inherits
|
|
the AgentLog from the main server.
|
|
</dl>
|
|
<strong>Security:</strong> if a program is used, then it will be
|
|
run under the user who started httpd. This will be root if the server
|
|
was started by root; be sure that the program is secure.<p>
|
|
|
|
<strong>Security:</strong> See the <A
|
|
HREF="../misc/security_tips.html">security tips</A> document for
|
|
details on why your security could be compromised if the directory
|
|
where logfiles are stored is writable by anyone other than the user
|
|
that starts the server.<P>
|
|
|
|
This directive is provided for compatibility with NCSA 1.4.<p>
|
|
|
|
<!--#include virtual="footer.html" -->
|
|
</BODY>
|
|
</HTML>
|
|
|