<?xml version="1.0" encoding="EUC-KR" ?>
<!DOCTYPE manualpage SYSTEM "./style/manualpage.dtd">
<?xml-stylesheet type="text/xsl" href="./style/manual.ko.xsl"?>
-<!-- English revision: 1.7 -->
+<!-- English Revision: 105989:1342078 (outdated) -->
+
+<!--
+ Licensed to the Apache Software Foundation (ASF) under one or more
+ contributor license agreements. See the NOTICE file distributed with
+ this work for additional information regarding copyright ownership.
+ The ASF licenses this file to You under the Apache License, Version 2.0
+ (the "License"); you may not use this file except in compliance with
+ the License. You may obtain a copy of the License at
+
+ http://www.apache.org/licenses/LICENSE-2.0
+
+ Unless required by applicable law or agreed to in writing, software
+ distributed under the License is distributed on an "AS IS" BASIS,
+ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ See the License for the specific language governing permissions and
+ limitations under the License.
+-->
<manualpage metafile="suexec.xml.meta">
<p>ÀÌ ±â´ÉÀ» ÀûÀýÈ÷ »ç¿ëÇÏ¸é »ç¿ëÀÚ°¡ Á÷Á¢ CGI³ª SSI ÇÁ·Î±×·¥À»
°³¹ßÇÏ°í ½ÇÇàÇÒ¶§ ¹ß»ýÇÒ ¼ö ÀÖ´Â º¸¾ÈÀ§ÇèÀ» »ó´çÈ÷ ÁÙÀÏ
¼ö ÀÖ´Ù. ±×·¯³ª suEXEC°¡ ºÎÀûÀýÇÏ°Ô ¼³Á¤µÇ¸é ¸¹Àº ¹®Á¦¿Í
- ÄÄÇ»ÅÍ¿¡ »õ·Î¿î º¸¾È ÇãÁ¡À» ¸¸µé ¼ö ÀÖ´Ù. ¸¸¾à setuid root
+ ÄÄÇ»ÅÍ¿¡ »õ·Î¿î º¸¾È ÇãÁ¡À» ¸¸µé ¼ö ÀÖ´Ù. ¸¸¾à <em>setuid root</em>
ÇÁ·Î±×·¥°ú ÀÌ·± ÇÁ·Î±×·¥ÀÇ º¸¾È ¹®Á¦¿¡ »ý¼ÒÇÏ´Ù¸é suEXEC¸¦
»ç¿ëÇÏÁö¾Ê±æ Áø½ÉÀ¸·Î ¹Ù¶õ´Ù.</p>
</summary>
<ol>
<li>
+ <strong>wrapper¸¦ ½ÇÇàÇÏ´Â »ç¿ëÀÚ°¡ ½Ã½ºÅÛÀÇ Á¤»óÀûÀÎ
+ »ç¿ëÀÚÀΰ¡?</strong>
+
+ <p class="indent">
+ wrapper¸¦ ½ÇÇàÇÏ´Â »ç¿ëÀÚ°¡ ½ÇÁ¦·Î ½Ã½ºÅÛÀÇ »ç¿ëÀÚÀÎÁö
+ È®ÀÎÇÑ´Ù.
+ </p>
+ </li>
+
+ <li>
<strong>ÀûÀýÇÑ ¼öÀÇ ¾Æ±Ô¸ÕÆ®·Î wrapper¸¦ ½ÇÇàÇϴ°¡?</strong>
<p class="indent">
</p>
</li>
- <li>
- <strong>wrapper¸¦ ½ÇÇàÇÏ´Â »ç¿ëÀÚ°¡ ½Ã½ºÅÛÀÇ Á¤»óÀûÀÎ
- »ç¿ëÀÚÀΰ¡?</strong>
-
- <p class="indent">
- wrapper¸¦ ½ÇÇàÇÏ´Â »ç¿ëÀÚ°¡ ½ÇÁ¦·Î ½Ã½ºÅÛÀÇ »ç¿ëÀÚÀÎÁö
- È®ÀÎÇÑ´Ù.
- </p>
- </li>
-
<li>
<strong>ÀÌ »ç¿ëÀÚ°¡ wrapper¸¦ ½ÇÇàÇϵµ·Ï Çã¿ëµÇ¾ú³ª?</strong>
</li>
<li>
- <strong>ÁöÁ¤ÇÑ ÇÁ·Î±×·¥ÀÌ ¾ÈÀüÇÏÁö¾ÊÀº °èÃþÂüÁ¶¸¦ °¡Áö´Â°¡?</strong>
+ <strong>ÁöÁ¤ÇÑ CGI³ª SSI ÇÁ·Î±×·¥ÀÌ ¾ÈÀüÇÏÁö¾ÊÀº °èÃþÂüÁ¶¸¦
+ °¡Áö´Â°¡?</strong>
<p class="indent">
- ÁöÁ¤ÇÑ ÇÁ·Î±×·¥ÀÌ '/'·Î ½ÃÀÛÇϰųª µÞÂüÁ¶ '..'À» °¡Áö´Â°¡?
- À̵éÀ» »ç¿ëÇÒ ¼ö ¾ø´Ù. ÁöÁ¤ÇÑ ÇÁ·Î±×·¥Àº ¾ÆÆÄÄ¡ À¥°ø°£³»¿¡
- ÀÖ¾î¾ß ÇÑ´Ù.
+ ÁöÁ¤ÇÑ CGI³ª SSI ÇÁ·Î±×·¥ÀÌ '/'·Î ½ÃÀÛÇϰųª µÞÂüÁ¶
+ '..'À» °¡Áö´Â°¡? À̵éÀ» »ç¿ëÇÒ ¼ö ¾ø´Ù. ÁöÁ¤ÇÑ CGI/SSI
+ ÇÁ·Î±×·¥Àº suEXEC ¹®¼ root (¾Æ·¡
+ <code>--with-suexec-docroot=<em>DIR</em></code> Âü°í)
+ ³»¿¡ ÀÖ¾î¾ß ÇÑ´Ù.
</p>
</li>
<p class="indent">
- ÇöÀç suEXEC´Â 'root'°¡ CGI/SSI ÇÁ·Î±×·¥À» ½ÇÇàÇÒ ¼ö
- ¾øµµ·Ï ÇÑ´Ù.
+ ÇöÀç suEXEC´Â <code><em>root</em></code>°¡ CGI/SSI
+ ÇÁ·Î±×·¥À» ½ÇÇàÇÒ ¼ö ¾øµµ·Ï ÇÑ´Ù.
</p>
</li>
<strong>ÁöÁ¤ÇÑ ±×·ìÀÌ superuser ±×·ìÀÌ <em>¾Æ´Ñ°¡</em>?</strong>
<p class="indent">
- ÇöÀç suEXEC´Â 'root' ±×·ìÀÌ CGI/SSI ÇÁ·Î±×·¥À» ½ÇÇàÇÒ
- ¼ö ¾øµµ·Ï ÇÑ´Ù.
+ ÇöÀç suEXEC´Â <code><em>root</em></code> ±×·ìÀÌ CGI/SSI
+ ÇÁ·Î±×·¥À» ½ÇÇàÇÒ ¼ö ¾øµµ·Ï ÇÑ´Ù.
</p>
</li>
</li>
<li>
- <strong>ÇÁ·Î±×·¥ÀÌ ÀÖ´Â µð·ºÅ丮°¡ Á¸ÀçÇϳª?</strong>
+ <strong>CGI/SSI ÇÁ·Î±×·¥ÀÌ ÀÖ´Â µð·ºÅ丮·Î µð·ºÅ丮¸¦
+ º¯°æÇÒ ¼ö Àִ°¡?</strong>
<p class="indent">
- Á¸ÀçÇÏÁö ¾Ê´Ù¸é ÆÄÀÏÀÌ ÀÖÀ» ¼ö ¾ø´Ù.
+ µð·ºÅ丮°¡ Á¸ÀçÇÏÁö ¾Ê´Ù¸é ÆÄÀÏÀÌ ÀÖÀ» ¼ö ¾ø´Ù. ÀÌ°÷À¸·Î
+ µð·ºÅ丮¸¦ º¯°æÇÒ ¼ö ¾ø´Ù¸é µð·ºÅ丮´Â Á¸ÀçÇÏÁö ¾ÊÀ»
+ °ÍÀÌ´Ù.
</p>
</li>
<p class="indent">
¼¹öÀÇ ÀϹÝÀûÀÎ ºÎºÐÀ» ¿äûÇÒ °æ¿ì ¿äûÇÏ´Â µð·ºÅ丮°¡
- ¼¹öÀÇ ¹®¼ root ¾Æ·¡ Àִ°¡? UserDirÀ» ¿äûÇÒ °æ¿ì
- ¿äûÇÏ´Â µð·ºÅ丮°¡ »ç¿ëÀÚ ¹®¼ root ¾Æ·¡ Àִ°¡?
+ suEXEC ¹®¼ root ¾Æ·¡ Àִ°¡? UserDirÀ» ¿äûÇÒ °æ¿ì
+ ¿äûÇÏ´Â µð·ºÅ丮°¡ suEXEC userdir·Î ¼³Á¤ÇÑ (<a
+ href="#install">suEXEC ¼³Á¤ ¿É¼Ç</a> Âü°í) µð·ºÅ丮
+ ¾Æ·¡¿¡ Àִ°¡?
</p>
</li>
</li>
<li>
- <strong>ÁöÁ¤ÇÑ ÇÁ·Î±×·¥ÀÌ Á¸ÀçÇϴ°¡?</strong>
+ <strong>ÁöÁ¤ÇÑ CGI/SSI ÇÁ·Î±×·¥ÀÌ Á¸ÀçÇϴ°¡?</strong>
<p class="indent">
Á¸ÀçÇÏÁö¾Ê´Ù¸é ½ÇÇàÇÒ ¼öµµ ¾ø´Ù.
</li>
<li>
- <strong>´Ù¸¥ ´©±¸µµ ÁöÁ¤ÇÑ ÇÁ·Î±×·¥¿¡ ¾²±â±ÇÇÑÀÌ
+ <strong>´Ù¸¥ ´©±¸µµ ÁöÁ¤ÇÑ CGI/SSI ÇÁ·Î±×·¥¿¡ ¾²±â±ÇÇÑÀÌ
<em>¾ø´Â°¡</em>?</strong>
<p class="indent">
- ¼ÒÀ¯ÀÚ¿Ü ´©±¸µµ ÇÁ·Î±×·¥À» º¯°æÇÏ±æ ¿øÇÏÁö¾Ê´Â´Ù.
+ ¼ÒÀ¯ÀÚ¿Ü ´©±¸µµ CGI/SSI ÇÁ·Î±×·¥À» º¯°æÇÏ±æ ¿øÇÏÁö¾Ê´Â´Ù.
</p>
</li>
<li>
- <strong>ÁöÁ¤ÇÑ ÇÁ·Î±×·¥ÀÌ setuid³ª setgid°¡ <em>¾Æ´Ñ°¡</em>?</strong>
+ <strong>ÁöÁ¤ÇÑ CGI/SSI ÇÁ·Î±×·¥ÀÌ setuid³ª setgid°¡
+ <em>¾Æ´Ñ°¡</em>?</strong>
<p class="indent">
¿ì¸®´Â ÇÁ·Î±×·¥ÀÌ ´Ù½Ã UID/GID¸¦ º¯°æÇÏ±æ ¿øÇÏÁö¾Ê´Â´Ù.
</li>
<li>
- <strong>¼º°øÀûÀ¸·Î ÁöÁ¤ÇÑ ÇÁ·Î±×·¥À» ½ÇÇàÇÒ ¼ö Àִ°¡?</strong>
+ <strong>¼º°øÀûÀ¸·Î ÁöÁ¤ÇÑ CGI/SSI ÇÁ·Î±×·¥À» ½ÇÇàÇÒ
+ ¼ö Àִ°¡?</strong>
<p class="indent">
- ¿©±â¼ suEXEC°¡ ³¡³ª°í ÁöÁ¤ÇÑ ÇÁ·Î±×·¥ÀÌ ½ÃÀÛÇÑ´Ù.
+ ¿©±â¼ suEXEC°¡ ³¡³ª°í ÁöÁ¤ÇÑ CGI/SSI ÇÁ·Î±×·¥ÀÌ ½ÃÀÛÇÑ´Ù.
</p>
</li>
</ol>
<dd>ÀÌ ¿É¼ÇÀº ±âº»ÀûÀ¸·Î ¼³Ä¡µÇ°Å³ª È°¼ºÈµÇÁö¾Ê´Â suEXEC
±â´ÉÀ» È°¼ºÈÇÑ´Ù. APACI°¡ suEXEC¸¦ ¹Þ¾ÆµéÀÌ·Á¸é
- --enable-suexec ¿É¼Ç¿Ü¿¡ --with-suexec-xxxxx ¿É¼ÇÀÌ ÃÖ¼ÒÇÑ
- ÇÑ°³ ÇÊ¿äÇÏ´Ù.</dd>
+ <code>--enable-suexec</code> ¿É¼Ç¿Ü¿¡
+ <code>--with-suexec-xxxxx</code> ¿É¼ÇÀÌ ÃÖ¼ÒÇÑ ÇÑ°³
+ ÇÊ¿äÇÏ´Ù.</dd>
<dt><code>--with-suexec-bin=<em>PATH</em></code></dt>
- <dd>suexec ¹ÙÀ̳ʸ® °æ·Î´Â º¸¾È»ó ÀÌÀ¯·Î ¼¹ö¿¡ ±â·ÏµÇ¾ß
- ÇÑ´Ù. °æ·Î ±âº»°ªÀ» ¹«½ÃÇÏ·Á¸é ÀÌ ¿É¼ÇÀ» »ç¿ëÇÑ´Ù. <em>¿¹¸¦
- µé¾î</em> <code>--with-suexec-bin=/usr/sbin/suexec</code></dd>
+ <dd><code>suexec</code> ¹ÙÀ̳ʸ® °æ·Î´Â º¸¾È»ó ÀÌÀ¯·Î
+ ¼¹ö¿¡ ±â·ÏµÇ¾ß ÇÑ´Ù. °æ·Î ±âº»°ªÀ» ¹«½ÃÇÏ·Á¸é ÀÌ ¿É¼ÇÀ»
+ »ç¿ëÇÑ´Ù. <em>¿¹¸¦ µé¾î</em>
+ <code>--with-suexec-bin=/usr/sbin/suexec</code></dd>
<dt><code>--with-suexec-caller=<em>UID</em></code></dt>
<dd>¾ÆÆÄÄ¡ÀÇ DocumentRoot¸¦ Á¤ÀÇÇÑ´Ù. ÀÌ´Â suEXEC°¡ »ç¿ëÇÒ
¼ö ÀÖ´Â (UserDirsÀ» Á¦¿ÜÇÑ) À¯ÀÏÇÑ °ø°£ÀÌ´Ù. ±âº» µð·ºÅ丮´Â
- --datadir °ª¿¡ "/htdocs"À» ºÙÀÎ °ÍÀÌ´Ù. <em>¿¹¸¦ µé¾î</em>
- "<code>--datadir=/home/apache</code>"·Î ±¸¼ºÇß´Ù¸é suEXEC
- wrapper´Â document root·Î "/home/apache/htdocs" µð·ºÅ丮¸¦
- »ç¿ëÇÑ´Ù.</dd>
+ <code>--datadir</code> °ª¿¡ "/htdocs"À» ºÙÀÎ °ÍÀÌ´Ù.
+ <em>¿¹¸¦ µé¾î</em> "<code>--datadir=/home/apache</code>"·Î
+ ±¸¼ºÇß´Ù¸é suEXEC wrapper´Â document root·Î
+ "/home/apache/htdocs" µð·ºÅ丮¸¦ »ç¿ëÇÑ´Ù.</dd>
<dt><code>--with-suexec-uidmin=<em>UID</em></code></dt>
<dd>¸ðµç suEXEC ÀÛµ¿°ú ¿À·ù¸¦ (°¨½Ã³ª µð¹ö±ë ¸ñÀû¿¡ À¯¿ëÇÑ)
±â·ÏÇÒ ·Î±×ÆÄÀϸíÀ» ÁöÁ¤ÇÑ´Ù. ±âº»ÀûÀ¸·Î ·Î±×ÆÄÀÏÀÇ À̸§Àº
- "suexec_log"ÀÌ°í Ç¥ÁØ ·Î±×ÆÄÀÏ µð·ºÅ丮¿¡ (--logfiledir)
- À§Ä¡ÇÑ´Ù.</dd>
+ "suexec_log"ÀÌ°í Ç¥ÁØ ·Î±×ÆÄÀÏ µð·ºÅ丮¿¡
+ (<code>--logfiledir</code>) À§Ä¡ÇÑ´Ù.</dd>
<dt><code>--with-suexec-safepath=<em>PATH</em></code></dt>
±âº»°ªÀº "/usr/local/bin:/usr/bin:/bin"ÀÌ´Ù.</dd>
</dl>
- <p><strong>suEXEC ±¸¼ºÀ» Á¡°ËÇ϶ó</strong><br />
- suEXEC wrapper¸¦ ÄÄÆÄÀÏÇÏ°í ¼³Ä¡Çϱâ Àü¿¡ --layout ¿É¼ÇÀ»
- »ç¿ëÇÏ¿© ¼³Á¤À» Á¡°ËÇÒ ¼ö ÀÖ´Ù.<br />
- Ãâ·Â¿¹:</p>
-
-<example>
- suEXEC setup:<br />
- suexec binary: /usr/local/apache/sbin/suexec<br />
- document root: /usr/local/apache/share/htdocs<br />
- userdir suffix: public_html<br />
- logfile: /usr/local/apache/var/log/suexec_log<br />
- safe path: /usr/local/bin:/usr/bin:/bin<br />
- caller ID: www<br />
- minimum user ID: 100<br />
- minimum group ID: 100<br />
-</example>
-
<p><strong>suEXEC wrapper¸¦ ÄÄÆÄÀÏÇÏ°í ¼³Ä¡Çϱâ</strong><br />
- --enable-suexec ¿É¼ÇÀ¸·Î suEXEC ±â´ÉÀ» °¡´ÉÇÏ°ÔÇÑ °æ¿ì
- "make" ¸í·É¾î¸¦ ½ÇÇàÇϸé suexec ½ÇÇàÆÄÀÏÀÌ (¾ÆÆÄÄ¡¿Í ÇÔ²²)
- ÀÚµ¿À¸·Î ¸¸µé¾îÁø´Ù.<br />
- ¸ðµç°ÍÀ» ÄÄÆÄÀÏÇÑ ÈÄ "make install" ¸í·É¾î¸¦ ½ÇÇàÇÏ¿© ¼³Ä¡ÇÒ
- ¼ö ÀÖ´Ù. ¹ÙÀ̳ʸ®ÆÄÀÏ "suexec"´Â --sbindir ¿É¼ÇÀ¸·Î ÁöÁ¤ÇÑ
- µð·ºÅ丮¿¡ ¼³Ä¡µÈ´Ù. ±âº» À§Ä¡´Â
- "/usr/local/apache/sbin/suexec"ÀÌ´Ù.<br />
+ <code>--enable-suexec</code> ¿É¼ÇÀ¸·Î suEXEC ±â´ÉÀ» °¡´ÉÇÏ°ÔÇÑ
+ °æ¿ì <code>make</code> ¸í·É¾î¸¦ ½ÇÇàÇϸé <code>suexec</code>
+ ½ÇÇàÆÄÀÏÀÌ (¾ÆÆÄÄ¡¿Í ÇÔ²²) ÀÚµ¿À¸·Î ¸¸µé¾îÁø´Ù.<br />
+ ¸ðµç°ÍÀ» ÄÄÆÄÀÏÇÑ ÈÄ <code>make install</code> ¸í·É¾î¸¦
+ ½ÇÇàÇÏ¿© ¼³Ä¡ÇÒ ¼ö ÀÖ´Ù. ¹ÙÀ̳ʸ®ÆÄÀÏ <code>suexec</code>´Â
+ <code>--sbindir</code> ¿É¼ÇÀ¸·Î ÁöÁ¤ÇÑ µð·ºÅ丮¿¡ ¼³Ä¡µÈ´Ù.
+ ±âº» À§Ä¡´Â "/usr/local/apache2/sbin/suexec"ÀÌ´Ù.<br />
¼³Ä¡ °úÁ¤¿¡ <strong><em>root ±ÇÇÑ</em></strong>ÀÌ ÇÊ¿äÇÔÀ»
ÁÖÀÇÇ϶ó. wrapper°¡ »ç¿ëÀÚ ID¸¦ ¼³Á¤ÇϱâÀ§Çؼ´Â ¼ÒÀ¯ÀÚ°¡
<code><em>root</em></code>ÀÌ°í ÆÄÀϸðµå·Î setuserid ½ÇÇàºñÆ®°¡
¼³Á¤µÇ¾ß ÇÑ´Ù.</p>
+ <p><strong>ÆíÁýÁõÀûÀÎ ±ÇÇѼ³Á¤</strong><br />
+ suEXEC wrapper´Â ÀÚ½ÅÀ» ½ÇÇàÇÑ »ç¿ëÀÚ°¡ ±¸¼º ¿É¼Ç
+ <code>--with-suexec-caller</code>·Î ÁöÁ¤ÇÑ ¿Ã¹Ù¸¥ »ç¿ëÀÚÀÎÁö
+ È®ÀÎÀ» ÇÏÁö¸¸, ÀÌ °Ë»ç ÀÌÀü¿¡ suEXEC°¡ »ç¿ëÇÏ´Â ½Ã½ºÅÛÈ£Ãâ
+ ȤÀº ¶óÀ̺귯¸® ÇÔ¼ö°¡ Á¶À۵ǾúÀ» ¼ö ÀÖ´Ù. À̸¦ ´ëºñÇϸç
+ ÀϹÝÀûÀ¸·Î ÁÁÀº ½À°üÀ̹ǷΠ¿ÀÁ÷ ¾ÆÆÄÄ¡¸¦ ½ÇÇàÇÏ´Â ±×·ì¸¸ÀÌ
+ suEXEC¸¦ ½ÇÇàÇÒ ¼ö ÀÖµµ·Ï ÆÄÀϽýºÅÛ ±ÇÇÑÀ» ÁöÁ¤ÇØ¾ß ÇÑ´Ù.</p>
+
+ <p>¿¹¸¦ µé¾î, À¥¼¹ö¸¦ ´ÙÀ½°ú °°ÀÌ ¼³Á¤ÇÏ°í:</p>
+
+<example>
+ User www<br />
+ Group webgroup<br />
+</example>
+
+ <p><code>suexec</code>¸¦ "/usr/local/apache2/sbin/suexec"¿¡
+ ¼³Ä¡ÇÏ¿´´Ù¸é, ´ÙÀ½À» ½ÇÇàÇØ¾ß ÇÑ´Ù:</p>
+
+<example>
+ chgrp webgroup /usr/local/apache2/bin/suexec<br />
+ chmod 4750 /usr/local/apache2/bin/suexec<br />
+</example>
+
+ <p>±×·¯¸é ¿ÀÁ÷ ¾ÆÆÄÄ¡¸¦ ½ÇÇàÇÏ´Â ±×·ì¸¸ÀÌ suEXEC wrapper¸¦
+ ½ÇÇàÇÒ ¼ö ÀÖ´Ù.</p>
</section>
<section id="enable"><title>suEXEC Å°°í ²ô±â</title>
- <p>¾ÆÆÄÄ¡´Â ½ÃÀÛÇÒ¶§ "sbin" µð·ºÅ丮¿¡¼ "suexec" ÆÄÀÏÀ»
- (±âº»°ª "/usr/local/apache/sbin/suexec") ã´Â´Ù. ¾ÆÆÄÄ¡°¡
- Á¤»óÀûÀ¸·Î ±¸¼ºµÈ suEXEC wrapper¸¦ ¹ß°ßÇϸé error log¿¡
- ´ÙÀ½°ú °°ÀÌ Ãâ·ÂÇÑ´Ù:</p>
+ <p>¾ÆÆÄÄ¡´Â ½ÃÀÛÇÒ¶§ <code>--sbindir</code> ¿É¼ÇÀ¸·Î ÁöÁ¤ÇÑ
+ µð·ºÅ丮¿¡¼ <code>suexec</code> ÆÄÀÏÀ» (±âº»°ª
+ "/usr/local/apache2/sbin/suexec") ã´Â´Ù. ¾ÆÆÄÄ¡°¡
+ Á¤»óÀûÀ¸·Î ±¸¼ºµÈ suEXEC wrapper¸¦ ¹ß°ßÇÏ¸é ¿À·ù ·Î±×(error
+ log)¿¡ ´ÙÀ½°ú °°ÀÌ Ãâ·ÂÇÑ´Ù:</p>
+
<example>
[notice] suEXEC mechanism enabled (wrapper: <em>/path/to/suexec</em>)
</example>
+
<p>¼¹ö ½ÃÀÛÁß¿¡ ÀÌ·± ¹®±¸¸¦ ¾ø´Ù¸é ¼¹ö´Â ±â´ëÇÑ Àå¼Ò¿¡¼
wrapper ÇÁ·Î±×·¥À» ãÁö ¸øÇ߰ųª, ½ÇÇàÆÄÀÏÀÌ <em>setuid
root</em>·Î ¼³Ä¡µÇÁö¾Ê¾Ò±â ¶§¹®ÀÏ °ÍÀÌ´Ù.</p>
<p>óÀ½À¸·Î suEXEC ±â´ÉÀ» »ç¿ëÇÏ°í ½Í°í ÀÌ¹Ì ¾ÆÆÄÄ¡ ¼¹ö°¡
½ÇÇàÁßÀ̶ó¸é, ¾ÆÆÄÄ¡¸¦ Á×ÀÌ°í ´Ù½Ã ½ÃÀÛÇØ¾ß ÇÑ´Ù. °£´ÜÈ÷
HUPÀ̳ª USR1 ½Ã±×³Î·Î Àç½ÃÀÛÇÏ´Â °ÍÀ¸·Î´Â ÃæºÐÇÏÁö ¾Ê´Ù. </p>
- <p>suEXEC¸¦ ¾È»ç¿ëÇÏ·Á¸é "suexec" ÆÄÀÏÀ» Áö¿îÈÄ ¾ÆÆÄÄ¡¸¦
- Á×ÀÌ°í Àç½ÃÀÛÇØ¾ß ÇÑ´Ù. </p>
+ <p>suEXEC¸¦ ¾È»ç¿ëÇÏ·Á¸é <code>suexec</code> ÆÄÀÏÀ» Áö¿îÈÄ
+ ¾ÆÆÄÄ¡¸¦ Á×ÀÌ°í Àç½ÃÀÛÇØ¾ß ÇÑ´Ù. </p>
</section>
<section id="usage"><title>suEXEC »ç¿ëÇϱâ</title>
+ <p>CGI ÇÁ·Î±×·¥ ¿äûÀÇ °æ¿ì <directive
+ module="mod_suexec">SuexecUserGroup</directive> Áö½Ã¾î¸¦
+ »ç¿ëÇÑ °¡»óÈ£½ºÆ®¿¡ ¿äûÀ» ÇÏ¿´°Å³ª <module>mod_userdir</module>ÀÌ
+ ¿äûÀ» ó¸®ÇÏ´Â °æ¿ì¿¡¸¸ suEXEC wrapper¸¦ È£ÃâÇÑ´Ù.</p>
+
<p><strong>°¡»óÈ£½ºÆ®:</strong><br /> suEXEC wrapper¸¦
»ç¿ëÇÏ´Â ÇÑ°¡Áö ¹æ¹ýÀº <directive
module="core">VirtualHost</directive> Á¤ÀÇ¿¡ <directive
userid¸¦ »ç¿ëÇÑ´Ù.</p>
<p><strong>»ç¿ëÀÚ µð·ºÅ丮:</strong><br />
- suEXEC wrapper´Â CGI ÇÁ·Î±×·¥À» ¿äûÀ» ¹ÞÀº »ç¿ëÀÚ°¡ ½ÇÇàÇϵµ·Ï
- ÇÒ ¼ö ÀÖ´Ù. À̸¦ À§ÇØ ½ÇÇàÇÏ±æ ¿øÇÏ´Â »ç¿ëÀÚ ID ¾Õ¿¡
- "<strong><code>~</code></strong>" ¹®ÀÚ¸¦ ºÙÀÌ¸é µÈ´Ù. ½ÇÇàÀ»
- À§ÇØ ÇØ´ç »ç¿ëÀÚ´Â CGI¸¦ ½ÇÇàÇÒ ¼ö ÀÖ¾î¾ß ÇÏ°í, ½ºÅ©¸³Æ®°¡
- À§ÀÇ <a href="#model">º¸¾È °Ë»ç</a> Ç׸ñÀ» ¸¸Á·ÇØ¾ß ÇÑ´Ù.</p>
-</section>
+ <module>mod_userdir</module>ÀÌ ¿äûÀ» ó¸®ÇÑ´Ù¸é suEXEC
+ wrapper¸¦ È£ÃâÇÏ¿©, ¿äûÇÑ »ç¿ëÀÚ µð·ºÅ丮¿¡ ÇØ´çÇÏ´Â »ç¿ëÀÚ
+ ID·Î CGI ÇÁ·Î±×·¥À» ½ÇÇàÇÑ´Ù. ÀÌ ±â´ÉÀÌ µ¿ÀÛÇÏ·Á¸é »ç¿ëÀÚ
+ ID·Î CGI¸¦ ½ÇÇàÇÒ ¼ö ÀÖ°í ½ºÅ©¸³Æ®°¡ À§ÀÇ <a href="#model">º¸¾È
+ °Ë»ç</a> Ç׸ñÀ» ¸¸Á·ÇØ¾ß ÇÑ´Ù. <a href="#install">±¸¼º
+ ¿É¼Ç</a> <code>--with-suexec-userdir</code>À» Âü°íÇ϶ó.</p> </section>
<section id="debug"><title>suEXEC µð¹ö±ëÇϱâ</title>
- <p>suEXEC wrapper´Â ·Î±× Á¤º¸¸¦ À§¿¡¼ ´Ù·é --with-suexec-logfile
- ¿É¼ÇÀ¸·Î ÁöÁ¤ÇÑ ÆÄÀÏ¿¡ ¾´´Ù. wrapper¸¦ ¿Ã¹Ù·Î ±¸¼ºÇÏ°í ¼³Ä¡Çß´Ù¸é
- ¾îµð¼ À߸øµÇ¾ú´ÂÁö ÀÌ ·Î±×ÆÄÀÏ¿Í ¼¹öÀÇ error_log¸¦ »ìÆìºÁ¶ó.</p>
+ <p>suEXEC wrapper´Â ·Î±× Á¤º¸¸¦ À§¿¡¼ ´Ù·é
+ <code>--with-suexec-logfile</code> ¿É¼ÇÀ¸·Î ÁöÁ¤ÇÑ ÆÄÀÏ¿¡
+ ¾´´Ù. wrapper¸¦ ¿Ã¹Ù·Î ±¸¼ºÇÏ°í ¼³Ä¡Çß´Ù¸é ¾îµð¼ À߸øµÇ¾ú´ÂÁö
+ ÀÌ ·Î±×ÆÄÀÏ¿Í ¼¹öÀÇ error_log¸¦ »ìÆìºÁ¶ó.</p>
</section>
<p><strong>ÁÖÀÇ!</strong> ÀÌ ¼½¼ÇÀº ¿ÏÀüÇÏÁö ¾ÊÀ» ¼ö ÀÖ´Ù.
¾ÆÆÄÄ¡±×·ìÀÇ <a
- href="http://httpd.apache.org/docs-2.1/suexec.html">¿Â¶óÀÎ
+ href="http://httpd.apache.org/docs/&httpd.docs;/suexec.html">¿Â¶óÀÎ
¹®¼</a>¿¡¼ ÀÌ ¹®¼ÀÇ ÃÖ½ÅÆÇÀ» Âü°íÇ϶ó.</p>
<p>wrapper°¡ ¼¹ö ¼³Á¤À» Á¦¾àÇÏ´Â ¸î°¡Áö Èï¹Ì·Î¿î Á¡ÀÌ ÀÖ´Ù.
µð·ºÅ丮 ±¸Á¶ Á¦ÇÑ
<p class="indent">
- º¸¾È°ú È¿À²¼ºÀ» À§ÇØ ¸ðµç suexec ¿äûÀº °¡»óÈ£½ºÆ®ÀÇ
+ º¸¾È°ú È¿À²¼ºÀ» À§ÇØ ¸ðµç suEXEC ¿äûÀº °¡»óÈ£½ºÆ®ÀÇ
°æ¿ì ÃÖ»óÀ§ document root ȤÀº userdir ¿äûÀÇ °æ¿ì
ÃÖ»óÀ§ °³ÀÎ document root ¾È¿¡¼ ¹ß»ýÇØ¾ß ÇÑ´Ù. ¿¹¸¦
µé¾î, °¡»óÈ£½ºÆ® ³×°³¸¦ ¼³Á¤Çß´Ù¸é °¡»óÈ£½ºÆ®¿¡¼
projects / apache / blobdiff