From 6e9e7fa77619b5b7929dbcab1f3577980f86be4f Mon Sep 17 00:00:00 2001 From: Marc Slemko Date: Tue, 22 Apr 1997 15:53:08 +0000 Subject: [PATCH] Clarify that the User and Group directives in VirtualHosts only apply to CGIs. Closes PR#341. git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@77982 13f79535-47bb-0310-9956-ffa450edef68 --- docs/manual/mod/core.html | 10 ++++++++-- 1 file changed, 8 insertions(+), 2 deletions(-) diff --git a/docs/manual/mod/core.html b/docs/manual/mod/core.html index 776b77e0a8..33e93ffcac 100644 --- a/docs/manual/mod/core.html +++ b/docs/manual/mod/core.html @@ -506,7 +506,10 @@ to the specified group, and will instead continue to run as the group of the original user.

Special note: Use of this directive in <VirtualHost> requires a -properly configured SUEXEC wrapper.

+properly configured suEXEC wrapper. +When used inside a <VirtualHost> in this manner, only the group +that CGIs are run as is affected. Non-CGI requests are still processed +as the group specified in the main Group directive.

SECURITY: See User for a discussion of the security considerations.

@@ -1291,7 +1294,10 @@ that original user. If you do start the server as root, then it is normal for the parent process to remain running as root.

Special note: Use of this directive in <VirtualHost> requires a -properly configured SUEXEC wrapper.

+properly configured suEXEC wrapper. +When used inside a <VirtualHost> in this manner, only the user +that CGIs are run as is affected. Non-CGI requests are still processed +with the user specified in the main User directive.

SECURITY: Don't set User (or Group) to root unless you know exactly what you are doing, and what the -- 2.40.0