Apache HTTP Server Version 2.4
Apache HTTP Server Version 2.4
Available Languages: tr
| Description: | Basic (required) security for Unix-family platforms. |
|---|---|
| Status: | Base |
| Module Identifier: | unixd_module |
| Source File: | mod_unixd.c |
| Description: | Directory for apache to run chroot(8) after startup. |
|---|---|
| Syntax: | ChrootDir /path/to/directory |
| Default: | none |
| Context: | server config |
| Status: | Base |
| Module: | mod_unixd |
| Compatibility: | Available in Apache 2.2.10 and later |
This directive tells the server to chroot(8) to the specified directory after startup, but before accepting requests over the 'net.
Note that running the server under chroot is not simple, and requires additional setup, particularly if you are running scripts such as CGI or PHP. Please make sure you are properly familiar with the operation of chroot before attempting to use this feature.
| Description: | Group under which the server will answer requests |
|---|---|
| Syntax: | Group unix-group |
| Default: | Group #-1 |
| Context: | server config |
| Status: | Base |
| Module: | mod_unixd |
The Group directive sets the group under which the server will answer requests. In order to use this directive, the server must be run initially as root. If you start the server as a non-root , it will fail to change to the specified group, and will instead continue to run as the group of the original . Unix-group is one of:
# followed by a group number.
Group www-group
It is recommended that you set up a new group specifically for running the server. Some s use nobody, but this is not always possible or desirable.
Don't set Group (or ) to root unless you know exactly what you are doing, and what the dangers are.
| Description: | Enable or disable the suEXEC feature |
|---|---|
| Syntax: | Suexec On|Off |
| Default: | On if suexec binary exists with proper owner and mode, Off otherwise |
| Context: | server config |
| Status: | Base |
| Module: | mod_unixd |
When On, startup will fail if the suexec binary doesn't exist or has an invalid owner or file mode.
When Off, suEXEC will be disabled even if the suexec binary exists and has a valid owner and file mode.
| Description: | The id under which the server will answer requests |
|---|---|
| Syntax: | unix-id |
| Default: | #-1 |
| Context: | server config |
| Status: | Base |
| Module: | mod_unixd |
The directive sets the ID as which the server will answer requests. In order to use this directive, the server must be run initially as root. If you start the server as a non-root , it will fail to change to the lesser privileged , and will instead continue to run as that original . If you do start the server as root, then it is normal for the parent process to remain running as root. Unix-id is one of:
The should have no privileges that result in it being able to access files that are not intended to be visible to the outside world, and similarly, the should not be able to execute code that is not meant for HTTP requests. It is recommended that you set up a new and group specifically for running the server. Some s use nobody, but this is not always desirable, since the nobody can have other uses on the system.
Don't set (or Group) to root unless you know exactly what you are doing, and what the dangers are.
Available Languages: tr