Date: Fri, 24 Jun 2016 10:44:38 +0000 (UTC) From: Mathieu Arnold <mat@FreeBSD.org> To: doc-committers@freebsd.org, svn-doc-all@freebsd.org, svn-doc-head@freebsd.org Subject: svn commit: r48998 - head/en_US.ISO8859-1/books/porters-handbook/special Message-ID: <201606241044.u5OAic6Y049060@repo.freebsd.org>
next in thread | raw e-mail | index | archive | help
Author: mat Date: Fri Jun 24 10:44:38 2016 New Revision: 48998 URL: https://svnweb.freebsd.org/changeset/doc/48998 Log: Add a warning about the usage of WWWOWN and WWWGRP. Reviewed by: wblock Sponsored by: Absolight Differential Revision: https://reviews.freebsd.org/D6932 Modified: head/en_US.ISO8859-1/books/porters-handbook/special/chapter.xml Modified: head/en_US.ISO8859-1/books/porters-handbook/special/chapter.xml ============================================================================== --- head/en_US.ISO8859-1/books/porters-handbook/special/chapter.xml Fri Jun 24 00:08:15 2016 (r48997) +++ head/en_US.ISO8859-1/books/porters-handbook/special/chapter.xml Fri Jun 24 10:44:38 2016 (r48998) @@ -3423,6 +3423,13 @@ do-install: mygroup</literal> if the port needs different values. This allows the user to override them easily.</para> + <important> + <para>Use <varname>WWWOWN</varname> and + <varname>WWWGRP</varname>, with parsimony, and remember that + every file the web server can write to is a security risk + waiting to happen.</para> + </important> + <para>Do not depend on Apache unless the web app explicitly needs Apache. Respect that users may wish to run a web app on different web server than Apache.</para>
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201606241044.u5OAic6Y049060>