diff options
| author | Ken Coar <coar@apache.org> | 1998-05-20 16:22:48 +0200 |
|---|---|---|
| committer | Ken Coar <coar@apache.org> | 1998-05-20 16:22:48 +0200 |
| commit | 1b19735a79deebb3e7135d25b02fcf909541e386 (patch) | |
| tree | 47f18d5b8f0ac5500b0f4cf2306bd85d2b042fa2 /docs/manual/misc/security_tips.html | |
| parent | Some of my semi-regular HTML cleanup (tag ordering, B/I (diff) | |
| download | apache2-1b19735a79deebb3e7135d25b02fcf909541e386.tar.xz apache2-1b19735a79deebb3e7135d25b02fcf909541e386.zip | |
Part 2 of the semi-regular HTML normalisation. Now on to
apache-site... No thirty.
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@81322 13f79535-47bb-0310-9956-ffa450edef68
Diffstat (limited to 'docs/manual/misc/security_tips.html')
| -rw-r--r-- | docs/manual/misc/security_tips.html | 8 |
1 files changed, 5 insertions, 3 deletions
diff --git a/docs/manual/misc/security_tips.html b/docs/manual/misc/security_tips.html index 0ec79e5f71..aa6106bf73 100644 --- a/docs/manual/misc/security_tips.html +++ b/docs/manual/misc/security_tips.html @@ -22,7 +22,7 @@ the suggestions will be general, others specific to Apache. <HR> -<H2><A name="serverroot">Permissions on ServerRoot Directories</A></H2> +<H2><A NAME="serverroot">Permissions on ServerRoot Directories</A></H2> <P>In typical operation, Apache is started by the root user, and it switches to the user defined by the <A HREF="../mod/core.html#user"><STRONG>User</STRONG></A> directive to serve hits. @@ -81,7 +81,8 @@ directive.<P> <HR> <H2>Non Script Aliased CGI</H2> -<P>Allowing users to execute <STRONG>CGI</STRONG> scripts in any directory should only +<P>Allowing users to execute <STRONG>CGI</STRONG> scripts in any directory +should only be considered if; <OL> <LI>You trust your users not to write scripts which will deliberately or @@ -93,7 +94,8 @@ make one more potential hole irrelevant. <HR> <H2>Script Alias'ed CGI</H2> -<P>Limiting <STRONG>CGI</STRONG> to special directories gives the admin control over +<P>Limiting <STRONG>CGI</STRONG> to special directories gives the admin +control over what goes into those directories. This is inevitably more secure than non script aliased CGI, but <STRONG>only if users with write access to the directories are trusted</STRONG> or the admin is willing to test each new CGI |