Gecko [ www.jdcpatala.org ]

Name	Size	Permission
core.html	535 B	-rw-r--r--
core.html.de	238.47 KB	-rw-r--r--
core.html.en	293.44 KB	-rw-r--r--
core.html.es	262.51 KB	-rw-r--r--
core.html.fr.utf8	324.56 KB	-rw-r--r--
core.html.ja.utf8	254.26 KB	-rw-r--r--
core.html.tr.utf8	313.84 KB	-rw-r--r--
directive-dict.html	598 B	-rw-r--r--
directive-dict.html.en	17.79 KB	-rw-r--r--
directive-dict.html.es	19.47 KB	-rw-r--r--
directive-dict.html.fr.utf8	19.11 KB	-rw-r--r--
directive-dict.html.ja.utf8	20.06 KB	-rw-r--r--
directive-dict.html.ko.euc-kr	15.65 KB	-rw-r--r--
directive-dict.html.tr.utf8	19.11 KB	-rw-r--r--
directives.html	760 B	-rw-r--r--
directives.html.de	57.67 KB	-rw-r--r--
directives.html.en	57.54 KB	-rw-r--r--
directives.html.es	57.83 KB	-rw-r--r--
directives.html.fr.utf8	57.65 KB	-rw-r--r--
directives.html.ja.utf8	57.74 KB	-rw-r--r--
directives.html.ko.euc-kr	57.39 KB	-rw-r--r--
directives.html.tr.utf8	57.57 KB	-rw-r--r--
directives.html.zh-cn.utf8	57.41 KB	-rw-r--r--
event.html	201 B	-rw-r--r--
event.html.en	28.84 KB	-rw-r--r--
event.html.fr.utf8	31.36 KB	-rw-r--r--
index.html	720 B	-rw-r--r--
index.html.de	23.21 KB	-rw-r--r--
index.html.en	22.93 KB	-rw-r--r--
index.html.es	23.49 KB	-rw-r--r--
index.html.fr.utf8	25.14 KB	-rw-r--r--
index.html.ja.utf8	24.2 KB	-rw-r--r--
index.html.ko.euc-kr	22.37 KB	-rw-r--r--
index.html.tr.utf8	23.2 KB	-rw-r--r--
index.html.zh-cn.utf8	22.81 KB	-rw-r--r--
mod_access_compat.html	322 B	-rw-r--r--
mod_access_compat.html.en	28.41 KB	-rw-r--r--
mod_access_compat.html.fr.utf8	31.22 KB	-rw-r--r--
mod_access_compat.html.ja.utf8	30.51 KB	-rw-r--r--
mod_actions.html	489 B	-rw-r--r--
mod_actions.html.de	13.78 KB	-rw-r--r--
mod_actions.html.en	12.72 KB	-rw-r--r--
mod_actions.html.fr.utf8	13.32 KB	-rw-r--r--
mod_actions.html.ja.utf8	14.43 KB	-rw-r--r--
mod_actions.html.ko.euc-kr	12.37 KB	-rw-r--r--
mod_alias.html	479 B	-rw-r--r--
mod_alias.html.en	36.82 KB	-rw-r--r--
mod_alias.html.fr.utf8	40.04 KB	-rw-r--r--
mod_alias.html.ja.utf8	28.55 KB	-rw-r--r--
mod_alias.html.ko.euc-kr	22.95 KB	-rw-r--r--
mod_alias.html.tr.utf8	39.33 KB	-rw-r--r--
mod_allowmethods.html	223 B	-rw-r--r--
mod_allowmethods.html.en	8.09 KB	-rw-r--r--
mod_allowmethods.html.fr.utf8	8.4 KB	-rw-r--r--
mod_asis.html	386 B	-rw-r--r--
mod_asis.html.en	8.9 KB	-rw-r--r--
mod_asis.html.fr.utf8	9.18 KB	-rw-r--r--
mod_asis.html.ja.utf8	9.74 KB	-rw-r--r--
mod_asis.html.ko.euc-kr	8.47 KB	-rw-r--r--
mod_auth_basic.html	410 B	-rw-r--r--
mod_auth_basic.html.en	19.57 KB	-rw-r--r--
mod_auth_basic.html.fr.utf8	21.6 KB	-rw-r--r--
mod_auth_basic.html.ja.utf8	16.32 KB	-rw-r--r--
mod_auth_basic.html.ko.euc-kr	13.84 KB	-rw-r--r--
mod_auth_digest.html	319 B	-rw-r--r--
mod_auth_digest.html.en	20.11 KB	-rw-r--r--
mod_auth_digest.html.fr.utf8	21.9 KB	-rw-r--r--
mod_auth_digest.html.ko.euc-kr	20.41 KB	-rw-r--r--
mod_auth_form.html	217 B	-rw-r--r--
mod_auth_form.html.en	50.41 KB	-rw-r--r--
mod_auth_form.html.fr.utf8	54.73 KB	-rw-r--r--
mod_authn_anon.html	410 B	-rw-r--r--
mod_authn_anon.html.en	16.5 KB	-rw-r--r--
mod_authn_anon.html.fr.utf8	17.97 KB	-rw-r--r--
mod_authn_anon.html.ja.utf8	18.47 KB	-rw-r--r--
mod_authn_anon.html.ko.euc-kr	16.05 KB	-rw-r--r--
mod_authn_core.html	219 B	-rw-r--r--
mod_authn_core.html.en	16.42 KB	-rw-r--r--
mod_authn_core.html.fr.utf8	17.58 KB	-rw-r--r--
mod_authn_dbd.html	217 B	-rw-r--r--
mod_authn_dbd.html.en	15.09 KB	-rw-r--r--
mod_authn_dbd.html.fr.utf8	16.31 KB	-rw-r--r--
mod_authn_dbm.html	406 B	-rw-r--r--
mod_authn_dbm.html.en	12.69 KB	-rw-r--r--
mod_authn_dbm.html.fr.utf8	13.59 KB	-rw-r--r--
mod_authn_dbm.html.ja.utf8	13.07 KB	-rw-r--r--
mod_authn_dbm.html.ko.euc-kr	11.09 KB	-rw-r--r--
mod_authn_file.html	410 B	-rw-r--r--
mod_authn_file.html.en	11.42 KB	-rw-r--r--
mod_authn_file.html.fr.utf8	12.21 KB	-rw-r--r--
mod_authn_file.html.ja.utf8	12.44 KB	-rw-r--r--
mod_authn_file.html.ko.euc-kr	10.54 KB	-rw-r--r--
mod_authn_socache.html	225 B	-rw-r--r--
mod_authn_socache.html.en	18.82 KB	-rw-r--r--
mod_authn_socache.html.fr.utf8	20.67 KB	-rw-r--r--
mod_authnz_fcgi.html	221 B	-rw-r--r--
mod_authnz_fcgi.html.en	26.98 KB	-rw-r--r--
mod_authnz_fcgi.html.fr.utf8	29.33 KB	-rw-r--r--
mod_authnz_ldap.html	221 B	-rw-r--r--
mod_authnz_ldap.html.en	84.3 KB	-rw-r--r--
mod_authnz_ldap.html.fr.utf8	86.91 KB	-rw-r--r--
mod_authz_core.html	219 B	-rw-r--r--
mod_authz_core.html.en	37.04 KB	-rw-r--r--
mod_authz_core.html.fr.utf8	40.05 KB	-rw-r--r--
mod_authz_dbd.html	217 B	-rw-r--r--
mod_authz_dbd.html.en	18.2 KB	-rw-r--r--
mod_authz_dbd.html.fr.utf8	19.98 KB	-rw-r--r--
mod_authz_dbm.html	313 B	-rw-r--r--
mod_authz_dbm.html.en	12.86 KB	-rw-r--r--
mod_authz_dbm.html.fr.utf8	13.75 KB	-rw-r--r--
mod_authz_dbm.html.ko.euc-kr	10.39 KB	-rw-r--r--
mod_authz_groupfile.html	430 B	-rw-r--r--
mod_authz_groupfile.html.en	10.4 KB	-rw-r--r--
mod_authz_groupfile.html.fr.ut...	10.93 KB	-rw-r--r--
mod_authz_groupfile.html.ja.ut...	9.9 KB	-rw-r--r--
mod_authz_groupfile.html.ko.eu...	8.8 KB	-rw-r--r--
mod_authz_host.html	219 B	-rw-r--r--
mod_authz_host.html.en	13.39 KB	-rw-r--r--
mod_authz_host.html.fr.utf8	14.35 KB	-rw-r--r--
mod_authz_owner.html	414 B	-rw-r--r--
mod_authz_owner.html.en	11.29 KB	-rw-r--r--
mod_authz_owner.html.fr.utf8	11.92 KB	-rw-r--r--
mod_authz_owner.html.ja.utf8	12.93 KB	-rw-r--r--
mod_authz_owner.html.ko.euc-kr	11.1 KB	-rw-r--r--
mod_authz_user.html	410 B	-rw-r--r--
mod_authz_user.html.en	8.11 KB	-rw-r--r--
mod_authz_user.html.fr.utf8	8.37 KB	-rw-r--r--
mod_authz_user.html.ja.utf8	7.39 KB	-rw-r--r--
mod_authz_user.html.ko.euc-kr	6.85 KB	-rw-r--r--
mod_autoindex.html	499 B	-rw-r--r--
mod_autoindex.html.en	60.78 KB	-rw-r--r--
mod_autoindex.html.fr.utf8	67.28 KB	-rw-r--r--
mod_autoindex.html.ja.utf8	64.92 KB	-rw-r--r--
mod_autoindex.html.ko.euc-kr	50.19 KB	-rw-r--r--
mod_autoindex.html.tr.utf8	66.14 KB	-rw-r--r--
mod_brotli.html	211 B	-rw-r--r--
mod_brotli.html.en	21.14 KB	-rw-r--r--
mod_brotli.html.fr.utf8	22.5 KB	-rw-r--r--
mod_buffer.html	211 B	-rw-r--r--
mod_buffer.html.en	9.06 KB	-rw-r--r--
mod_buffer.html.fr.utf8	9.57 KB	-rw-r--r--
mod_cache.html	390 B	-rw-r--r--
mod_cache.html.en	68.08 KB	-rw-r--r--
mod_cache.html.fr.utf8	74.14 KB	-rw-r--r--
mod_cache.html.ja.utf8	52.35 KB	-rw-r--r--
mod_cache.html.ko.euc-kr	38.51 KB	-rw-r--r--
mod_cache_disk.html	410 B	-rw-r--r--
mod_cache_disk.html.en	20.1 KB	-rw-r--r--
mod_cache_disk.html.fr.utf8	21.26 KB	-rw-r--r--
mod_cache_disk.html.ja.utf8	18.36 KB	-rw-r--r--
mod_cache_disk.html.ko.euc-kr	15.72 KB	-rw-r--r--
mod_cache_socache.html	225 B	-rw-r--r--
mod_cache_socache.html.en	18.28 KB	-rw-r--r--
mod_cache_socache.html.fr.utf8	19.06 KB	-rw-r--r--
mod_cern_meta.html	313 B	-rw-r--r--
mod_cern_meta.html.en	11 KB	-rw-r--r--
mod_cern_meta.html.fr.utf8	11.56 KB	-rw-r--r--
mod_cern_meta.html.ko.euc-kr	10.54 KB	-rw-r--r--
mod_cgi.html	382 B	-rw-r--r--
mod_cgi.html.en	18.42 KB	-rw-r--r--
mod_cgi.html.fr.utf8	20.06 KB	-rw-r--r--
mod_cgi.html.ja.utf8	19.72 KB	-rw-r--r--
mod_cgi.html.ko.euc-kr	16.31 KB	-rw-r--r--
mod_cgid.html	386 B	-rw-r--r--
mod_cgid.html.en	11.56 KB	-rw-r--r--
mod_cgid.html.fr.utf8	12.15 KB	-rw-r--r--
mod_cgid.html.ja.utf8	12.2 KB	-rw-r--r--
mod_cgid.html.ko.euc-kr	10.7 KB	-rw-r--r--
mod_charset_lite.html	322 B	-rw-r--r--
mod_charset_lite.html.en	15.35 KB	-rw-r--r--
mod_charset_lite.html.fr.utf8	16.54 KB	-rw-r--r--
mod_charset_lite.html.ko.euc-k...	14.28 KB	-rw-r--r--
mod_data.html	207 B	-rw-r--r--
mod_data.html.en	7.49 KB	-rw-r--r--
mod_data.html.fr.utf8	7.68 KB	-rw-r--r--
mod_dav.html	382 B	-rw-r--r--
mod_dav.html.en	17.91 KB	-rw-r--r--
mod_dav.html.fr.utf8	19.45 KB	-rw-r--r--
mod_dav.html.ja.utf8	20.66 KB	-rw-r--r--
mod_dav.html.ko.euc-kr	17.71 KB	-rw-r--r--
mod_dav_fs.html	394 B	-rw-r--r--
mod_dav_fs.html.en	10.75 KB	-rw-r--r--
mod_dav_fs.html.fr.utf8	11.4 KB	-rw-r--r--
mod_dav_fs.html.ja.utf8	10.6 KB	-rw-r--r--
mod_dav_fs.html.ko.euc-kr	10.17 KB	-rw-r--r--
mod_dav_lock.html	307 B	-rw-r--r--
mod_dav_lock.html.en	9.76 KB	-rw-r--r--
mod_dav_lock.html.fr.utf8	10.32 KB	-rw-r--r--
mod_dav_lock.html.ja.utf8	10.51 KB	-rw-r--r--
mod_dbd.html	205 B	-rw-r--r--
mod_dbd.html.en	24.71 KB	-rw-r--r--
mod_dbd.html.fr.utf8	26.94 KB	-rw-r--r--
mod_deflate.html	398 B	-rw-r--r--
mod_deflate.html.en	28.35 KB	-rw-r--r--
mod_deflate.html.fr.utf8	30.4 KB	-rw-r--r--
mod_deflate.html.ja.utf8	31.06 KB	-rw-r--r--
mod_deflate.html.ko.euc-kr	26.17 KB	-rw-r--r--
mod_dialup.html	211 B	-rw-r--r--
mod_dialup.html.en	7.49 KB	-rw-r--r--
mod_dialup.html.fr.utf8	7.81 KB	-rw-r--r--
mod_dir.html	469 B	-rw-r--r--
mod_dir.html.en	22.39 KB	-rw-r--r--
mod_dir.html.fr.utf8	24.43 KB	-rw-r--r--
mod_dir.html.ja.utf8	19.66 KB	-rw-r--r--
mod_dir.html.ko.euc-kr	16.53 KB	-rw-r--r--
mod_dir.html.tr.utf8	23.66 KB	-rw-r--r--
mod_dumpio.html	301 B	-rw-r--r--
mod_dumpio.html.en	9.62 KB	-rw-r--r--
mod_dumpio.html.fr.utf8	9.99 KB	-rw-r--r--
mod_dumpio.html.ja.utf8	10.32 KB	-rw-r--r--
mod_echo.html	386 B	-rw-r--r--
mod_echo.html.en	7.44 KB	-rw-r--r--
mod_echo.html.fr.utf8	7.58 KB	-rw-r--r--
mod_echo.html.ja.utf8	7.88 KB	-rw-r--r--
mod_echo.html.ko.euc-kr	7.55 KB	-rw-r--r--
mod_env.html	469 B	-rw-r--r--
mod_env.html.en	11.6 KB	-rw-r--r--
mod_env.html.fr.utf8	12.08 KB	-rw-r--r--
mod_env.html.ja.utf8	11.07 KB	-rw-r--r--
mod_env.html.ko.euc-kr	9.9 KB	-rw-r--r--
mod_env.html.tr.utf8	11.72 KB	-rw-r--r--
mod_example_hooks.html	325 B	-rw-r--r--
mod_example_hooks.html.en	11.2 KB	-rw-r--r--
mod_example_hooks.html.fr.utf8	11.9 KB	-rw-r--r--
mod_example_hooks.html.ko.euc-...	10.76 KB	-rw-r--r--
mod_expires.html	398 B	-rw-r--r--
mod_expires.html.en	16.71 KB	-rw-r--r--
mod_expires.html.fr.utf8	17.81 KB	-rw-r--r--
mod_expires.html.ja.utf8	18.29 KB	-rw-r--r--
mod_expires.html.ko.euc-kr	15.08 KB	-rw-r--r--
mod_ext_filter.html	410 B	-rw-r--r--
mod_ext_filter.html.en	18.22 KB	-rw-r--r--
mod_ext_filter.html.fr.utf8	19.71 KB	-rw-r--r--
mod_ext_filter.html.ja.utf8	22.86 KB	-rw-r--r--
mod_ext_filter.html.ko.euc-kr	18.94 KB	-rw-r--r--
mod_file_cache.html	316 B	-rw-r--r--
mod_file_cache.html.en	15.4 KB	-rw-r--r--
mod_file_cache.html.fr.utf8	17.64 KB	-rw-r--r--
mod_file_cache.html.ko.euc-kr	14.45 KB	-rw-r--r--
mod_filter.html	211 B	-rw-r--r--
mod_filter.html.en	31.22 KB	-rw-r--r--
mod_filter.html.fr.utf8	34.81 KB	-rw-r--r--
mod_headers.html	398 B	-rw-r--r--
mod_headers.html.en	33.85 KB	-rw-r--r--
mod_headers.html.fr.utf8	37.21 KB	-rw-r--r--
mod_headers.html.ja.utf8	25.01 KB	-rw-r--r--
mod_headers.html.ko.euc-kr	19.54 KB	-rw-r--r--
mod_heartbeat.html	217 B	-rw-r--r--
mod_heartbeat.html.en	9.55 KB	-rw-r--r--
mod_heartbeat.html.fr.utf8	9.8 KB	-rw-r--r--
mod_heartmonitor.html	223 B	-rw-r--r--
mod_heartmonitor.html.en	12.12 KB	-rw-r--r--
mod_heartmonitor.html.fr.utf8	12.65 KB	-rw-r--r--
mod_http2.html	209 B	-rw-r--r--
mod_http2.html.en	62.64 KB	-rw-r--r--
mod_http2.html.fr.utf8	66.38 KB	-rw-r--r--
mod_ident.html	390 B	-rw-r--r--
mod_ident.html.en	9.94 KB	-rw-r--r--
mod_ident.html.fr.utf8	10.45 KB	-rw-r--r--
mod_ident.html.ja.utf8	10.88 KB	-rw-r--r--
mod_ident.html.ko.euc-kr	9.47 KB	-rw-r--r--
mod_imagemap.html	310 B	-rw-r--r--
mod_imagemap.html.en	21.22 KB	-rw-r--r--
mod_imagemap.html.fr.utf8	23.4 KB	-rw-r--r--
mod_imagemap.html.ko.euc-kr	19.77 KB	-rw-r--r--
mod_include.html	304 B	-rw-r--r--
mod_include.html.en	59.85 KB	-rw-r--r--
mod_include.html.fr.utf8	65.42 KB	-rw-r--r--
mod_include.html.ja.utf8	55.34 KB	-rw-r--r--
mod_info.html	386 B	-rw-r--r--
mod_info.html.en	14.6 KB	-rw-r--r--
mod_info.html.fr.utf8	15.53 KB	-rw-r--r--
mod_info.html.ja.utf8	15.12 KB	-rw-r--r--
mod_info.html.ko.euc-kr	12.6 KB	-rw-r--r--
mod_isapi.html	301 B	-rw-r--r--
mod_isapi.html.en	23.44 KB	-rw-r--r--
mod_isapi.html.fr.utf8	25.48 KB	-rw-r--r--
mod_isapi.html.ko.euc-kr	21.62 KB	-rw-r--r--
mod_lbmethod_bybusyness.html	237 B	-rw-r--r--
mod_lbmethod_bybusyness.html.e...	7.85 KB	-rw-r--r--
mod_lbmethod_bybusyness.html.f...	8.25 KB	-rw-r--r--
mod_lbmethod_byrequests.html	237 B	-rw-r--r--
mod_lbmethod_byrequests.html.e...	12.55 KB	-rw-r--r--
mod_lbmethod_byrequests.html.f...	13.08 KB	-rw-r--r--
mod_lbmethod_bytraffic.html	235 B	-rw-r--r--
mod_lbmethod_bytraffic.html.en	8.2 KB	-rw-r--r--
mod_lbmethod_bytraffic.html.fr...	8.6 KB	-rw-r--r--
mod_lbmethod_heartbeat.html	235 B	-rw-r--r--
mod_lbmethod_heartbeat.html.en	8.29 KB	-rw-r--r--
mod_lbmethod_heartbeat.html.fr...	8.65 KB	-rw-r--r--
mod_ldap.html	207 B	-rw-r--r--
mod_ldap.html.en	52.54 KB	-rw-r--r--
mod_ldap.html.fr.utf8	57.83 KB	-rw-r--r--
mod_log_config.html	504 B	-rw-r--r--
mod_log_config.html.en	35.48 KB	-rw-r--r--
mod_log_config.html.fr.utf8	37.95 KB	-rw-r--r--
mod_log_config.html.ja.utf8	33.81 KB	-rw-r--r--
mod_log_config.html.ko.euc-kr	25.54 KB	-rw-r--r--
mod_log_config.html.tr.utf8	37.34 KB	-rw-r--r--
mod_log_debug.html	217 B	-rw-r--r--
mod_log_debug.html.en	10.17 KB	-rw-r--r--
mod_log_debug.html.fr.utf8	10.76 KB	-rw-r--r--
mod_log_forensic.html	415 B	-rw-r--r--
mod_log_forensic.html.en	12.76 KB	-rw-r--r--
mod_log_forensic.html.fr.utf8	14.38 KB	-rw-r--r--
mod_log_forensic.html.ja.utf8	14.2 KB	-rw-r--r--
mod_log_forensic.html.tr.utf8	13.26 KB	-rw-r--r--
mod_logio.html	479 B	-rw-r--r--
mod_logio.html.en	10.38 KB	-rw-r--r--
mod_logio.html.fr.utf8	11.02 KB	-rw-r--r--
mod_logio.html.ja.utf8	10.25 KB	-rw-r--r--
mod_logio.html.ko.euc-kr	9.23 KB	-rw-r--r--
mod_logio.html.tr.utf8	10.61 KB	-rw-r--r--
mod_lua.html	205 B	-rw-r--r--
mod_lua.html.en	91.74 KB	-rw-r--r--
mod_lua.html.fr.utf8	101.5 KB	-rw-r--r--
mod_macro.html	209 B	-rw-r--r--
mod_macro.html.en	15.14 KB	-rw-r--r--
mod_macro.html.fr.utf8	16.11 KB	-rw-r--r--
mod_md.html	203 B	-rw-r--r--
mod_md.html.en	95.75 KB	-rw-r--r--
mod_md.html.fr.utf8	103.21 KB	-rw-r--r--
mod_mime.html	295 B	-rw-r--r--
mod_mime.html.en	64.63 KB	-rw-r--r--
mod_mime.html.fr.utf8	70.52 KB	-rw-r--r--
mod_mime.html.ja.utf8	70.58 KB	-rw-r--r--
mod_mime_magic.html	219 B	-rw-r--r--
mod_mime_magic.html.en	16.67 KB	-rw-r--r--
mod_mime_magic.html.fr.utf8	17.74 KB	-rw-r--r--
mod_negotiation.html	316 B	-rw-r--r--
mod_negotiation.html.en	21.36 KB	-rw-r--r--
mod_negotiation.html.fr.utf8	23.09 KB	-rw-r--r--
mod_negotiation.html.ja.utf8	22.53 KB	-rw-r--r--
mod_nw_ssl.html	211 B	-rw-r--r--
mod_nw_ssl.html.en	9.5 KB	-rw-r--r--
mod_nw_ssl.html.fr.utf8	9.8 KB	-rw-r--r--
mod_privileges.html	219 B	-rw-r--r--
mod_privileges.html.en	29.36 KB	-rw-r--r--
mod_privileges.html.fr.utf8	32.73 KB	-rw-r--r--
mod_proxy.html	298 B	-rw-r--r--
mod_proxy.html.en	130.78 KB	-rw-r--r--
mod_proxy.html.fr.utf8	147.41 KB	-rw-r--r--
mod_proxy.html.ja.utf8	92.16 KB	-rw-r--r--
mod_proxy_ajp.html	310 B	-rw-r--r--
mod_proxy_ajp.html.en	32.1 KB	-rw-r--r--
mod_proxy_ajp.html.fr.utf8	35.22 KB	-rw-r--r--
mod_proxy_ajp.html.ja.utf8	32.25 KB	-rw-r--r--
mod_proxy_balancer.html	325 B	-rw-r--r--
mod_proxy_balancer.html.en	22.97 KB	-rw-r--r--
mod_proxy_balancer.html.fr.utf...	25.71 KB	-rw-r--r--
mod_proxy_balancer.html.ja.utf...	18.82 KB	-rw-r--r--
mod_proxy_connect.html	322 B	-rw-r--r--
mod_proxy_connect.html.en	10.05 KB	-rw-r--r--
mod_proxy_connect.html.fr.utf8	10.56 KB	-rw-r--r--
mod_proxy_connect.html.ja.utf8	9.2 KB	-rw-r--r--
mod_proxy_express.html	225 B	-rw-r--r--
mod_proxy_express.html.en	13.41 KB	-rw-r--r--
mod_proxy_express.html.fr.utf8	14.08 KB	-rw-r--r--
mod_proxy_fcgi.html	219 B	-rw-r--r--
mod_proxy_fcgi.html.en	22.3 KB	-rw-r--r--
mod_proxy_fcgi.html.fr.utf8	24.51 KB	-rw-r--r--
mod_proxy_fdpass.html	223 B	-rw-r--r--
mod_proxy_fdpass.html.en	7.49 KB	-rw-r--r--
mod_proxy_fdpass.html.fr.utf8	7.72 KB	-rw-r--r--
mod_proxy_ftp.html	217 B	-rw-r--r--
mod_proxy_ftp.html.en	18.35 KB	-rw-r--r--
mod_proxy_ftp.html.fr.utf8	20.33 KB	-rw-r--r--
mod_proxy_hcheck.html	223 B	-rw-r--r--
mod_proxy_hcheck.html.en	17.56 KB	-rw-r--r--
mod_proxy_hcheck.html.fr.utf8	18.75 KB	-rw-r--r--
mod_proxy_html.html	219 B	-rw-r--r--
mod_proxy_html.html.en	33.61 KB	-rw-r--r--
mod_proxy_html.html.fr.utf8	38.34 KB	-rw-r--r--
mod_proxy_http.html	219 B	-rw-r--r--
mod_proxy_http.html.en	11.82 KB	-rw-r--r--
mod_proxy_http.html.fr.utf8	12.7 KB	-rw-r--r--
mod_proxy_http2.html	221 B	-rw-r--r--
mod_proxy_http2.html.en	10.25 KB	-rw-r--r--
mod_proxy_http2.html.fr.utf8	10.81 KB	-rw-r--r--
mod_proxy_scgi.html	219 B	-rw-r--r--
mod_proxy_scgi.html.en	14.63 KB	-rw-r--r--
mod_proxy_scgi.html.fr.utf8	15.59 KB	-rw-r--r--
mod_proxy_uwsgi.html	221 B	-rw-r--r--
mod_proxy_uwsgi.html.en	8.4 KB	-rw-r--r--
mod_proxy_uwsgi.html.fr.utf8	8.7 KB	-rw-r--r--
mod_proxy_wstunnel.html	227 B	-rw-r--r--
mod_proxy_wstunnel.html.en	11.01 KB	-rw-r--r--
mod_proxy_wstunnel.html.fr.utf...	11.62 KB	-rw-r--r--
mod_ratelimit.html	217 B	-rw-r--r--
mod_ratelimit.html.en	7.05 KB	-rw-r--r--
mod_ratelimit.html.fr.utf8	7.38 KB	-rw-r--r--
mod_reflector.html	217 B	-rw-r--r--
mod_reflector.html.en	8.53 KB	-rw-r--r--
mod_reflector.html.fr.utf8	8.87 KB	-rw-r--r--
mod_remoteip.html	215 B	-rw-r--r--
mod_remoteip.html.en	26.61 KB	-rw-r--r--
mod_remoteip.html.fr.utf8	29.21 KB	-rw-r--r--
mod_reqtimeout.html	219 B	-rw-r--r--
mod_reqtimeout.html.en	12.75 KB	-rw-r--r--
mod_reqtimeout.html.fr.utf8	13.64 KB	-rw-r--r--
mod_request.html	304 B	-rw-r--r--
mod_request.html.en	9.31 KB	-rw-r--r--
mod_request.html.fr.utf8	9.91 KB	-rw-r--r--
mod_request.html.tr.utf8	9.69 KB	-rw-r--r--
mod_rewrite.html	213 B	-rw-r--r--
mod_rewrite.html.en	78.02 KB	-rw-r--r--
mod_rewrite.html.fr.utf8	84.61 KB	-rw-r--r--
mod_sed.html	205 B	-rw-r--r--
mod_sed.html.en	11.67 KB	-rw-r--r--
mod_sed.html.fr.utf8	12.21 KB	-rw-r--r--
mod_session.html	213 B	-rw-r--r--
mod_session.html.en	34.94 KB	-rw-r--r--
mod_session.html.fr.utf8	38.05 KB	-rw-r--r--
mod_session_cookie.html	227 B	-rw-r--r--
mod_session_cookie.html.en	13.71 KB	-rw-r--r--
mod_session_cookie.html.fr.utf...	14.46 KB	-rw-r--r--
mod_session_crypto.html	227 B	-rw-r--r--
mod_session_crypto.html.en	17.87 KB	-rw-r--r--
mod_session_crypto.html.fr.utf...	19.28 KB	-rw-r--r--
mod_session_dbd.html	221 B	-rw-r--r--
mod_session_dbd.html.en	25.07 KB	-rw-r--r--
mod_session_dbd.html.fr.utf8	26.96 KB	-rw-r--r--
mod_setenvif.html	494 B	-rw-r--r--
mod_setenvif.html.en	21.34 KB	-rw-r--r--
mod_setenvif.html.fr.utf8	23.04 KB	-rw-r--r--
mod_setenvif.html.ja.utf8	21.65 KB	-rw-r--r--
mod_setenvif.html.ko.euc-kr	17.41 KB	-rw-r--r--
mod_setenvif.html.tr.utf8	22.17 KB	-rw-r--r--
mod_slotmem_plain.html	225 B	-rw-r--r--
mod_slotmem_plain.html.en	8.1 KB	-rw-r--r--
mod_slotmem_plain.html.fr.utf8	8.45 KB	-rw-r--r--
mod_slotmem_shm.html	221 B	-rw-r--r--
mod_slotmem_shm.html.en	8.7 KB	-rw-r--r--
mod_slotmem_shm.html.fr.utf8	9.1 KB	-rw-r--r--
mod_so.html	464 B	-rw-r--r--
mod_so.html.en	13.66 KB	-rw-r--r--
mod_so.html.fr.utf8	15.09 KB	-rw-r--r--
mod_so.html.ja.utf8	16.29 KB	-rw-r--r--
mod_so.html.ko.euc-kr	12.39 KB	-rw-r--r--
mod_so.html.tr.utf8	15.01 KB	-rw-r--r--
mod_socache_dbm.html	221 B	-rw-r--r--
mod_socache_dbm.html.en	6.16 KB	-rw-r--r--
mod_socache_dbm.html.fr.utf8	6.29 KB	-rw-r--r--
mod_socache_dc.html	219 B	-rw-r--r--
mod_socache_dc.html.en	6.21 KB	-rw-r--r--
mod_socache_dc.html.fr.utf8	6.34 KB	-rw-r--r--
mod_socache_memcache.html	231 B	-rw-r--r--
mod_socache_memcache.html.en	8.65 KB	-rw-r--r--
mod_socache_memcache.html.fr.u...	9.16 KB	-rw-r--r--
mod_socache_redis.html	225 B	-rw-r--r--
mod_socache_redis.html.en	10.27 KB	-rw-r--r--
mod_socache_redis.html.fr.utf8	10.94 KB	-rw-r--r--
mod_socache_shmcb.html	225 B	-rw-r--r--
mod_socache_shmcb.html.en	6.24 KB	-rw-r--r--
mod_socache_shmcb.html.fr.utf8	6.38 KB	-rw-r--r--
mod_speling.html	398 B	-rw-r--r--
mod_speling.html.en	12.86 KB	-rw-r--r--
mod_speling.html.fr.utf8	13.57 KB	-rw-r--r--
mod_speling.html.ja.utf8	14.53 KB	-rw-r--r--
mod_speling.html.ko.euc-kr	11.75 KB	-rw-r--r--
mod_ssl.html	205 B	-rw-r--r--
mod_ssl.html.en	188.2 KB	-rw-r--r--
mod_ssl.html.fr.utf8	207.15 KB	-rw-r--r--
mod_status.html	484 B	-rw-r--r--
mod_status.html.en	11.93 KB	-rw-r--r--
mod_status.html.fr.utf8	12.82 KB	-rw-r--r--
mod_status.html.ja.utf8	11.42 KB	-rw-r--r--
mod_status.html.ko.euc-kr	9.55 KB	-rw-r--r--
mod_status.html.tr.utf8	12.64 KB	-rw-r--r--
mod_substitute.html	219 B	-rw-r--r--
mod_substitute.html.en	14.62 KB	-rw-r--r--
mod_substitute.html.fr.utf8	15.55 KB	-rw-r--r--
mod_suexec.html	484 B	-rw-r--r--
mod_suexec.html.en	8.11 KB	-rw-r--r--
mod_suexec.html.fr.utf8	8.37 KB	-rw-r--r--
mod_suexec.html.ja.utf8	8.93 KB	-rw-r--r--
mod_suexec.html.ko.euc-kr	8.07 KB	-rw-r--r--
mod_suexec.html.tr.utf8	8.32 KB	-rw-r--r--
mod_systemd.html	213 B	-rw-r--r--
mod_systemd.html.en	7.9 KB	-rw-r--r--
mod_systemd.html.fr.utf8	8.11 KB	-rw-r--r--
mod_tls.html	118 B	-rw-r--r--
mod_tls.html.en	42.32 KB	-rw-r--r--
mod_unique_id.html	406 B	-rw-r--r--
mod_unique_id.html.en	15.14 KB	-rw-r--r--
mod_unique_id.html.fr.utf8	17.4 KB	-rw-r--r--
mod_unique_id.html.ja.utf8	18.45 KB	-rw-r--r--
mod_unique_id.html.ko.euc-kr	13.09 KB	-rw-r--r--
mod_unixd.html	298 B	-rw-r--r--
mod_unixd.html.en	13.64 KB	-rw-r--r--
mod_unixd.html.fr.utf8	14.69 KB	-rw-r--r--
mod_unixd.html.tr.utf8	14.34 KB	-rw-r--r--
mod_userdir.html	489 B	-rw-r--r--
mod_userdir.html.en	12.57 KB	-rw-r--r--
mod_userdir.html.fr.utf8	13.71 KB	-rw-r--r--
mod_userdir.html.ja.utf8	13.08 KB	-rw-r--r--
mod_userdir.html.ko.euc-kr	10.79 KB	-rw-r--r--
mod_userdir.html.tr.utf8	13.22 KB	-rw-r--r--
mod_usertrack.html	217 B	-rw-r--r--
mod_usertrack.html.en	19.68 KB	-rw-r--r--

Code Editor : mod_privileges.html.en

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head>
<meta content="text/html; charset=UTF-8" http-equiv="Content-Type" />

<title>mod_privileges - Apache HTTP Server Version 2.4</title>
<link href="../style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
<link href="../style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
<link href="../style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="../style/css/prettify.css" />
<script src="../style/scripts/prettify.min.js" type="text/javascript">
</script>

<p>This module enables different Virtual Hosts to run with different
Unix <var>User</var> and <var>Group</var> IDs, and with different
<a href="http://sosc-dr.sun.com/bigadmin/features/articles/least_privilege.jsp">Solaris Privileges</a>.  In particular, it offers a solution to the
problem of privilege separation between different Virtual Hosts, first
promised by the abandoned perchild MPM.  It also offers other security
enhancements.</p>

<p>Unlike perchild, <code class="module"><a href="../mod/mod_privileges.html">mod_privileges</a></code>
is not itself an MPM.  It works <em>within</em> a processing model to
set privileges and User/Group <em>per request</em> in a running process.
It is therefore not compatible with a threaded MPM, and will refuse
to run under one.</p>

<p><code class="module"><a href="../mod/mod_privileges.html">mod_privileges</a></code> raises security issues similar to
those of <a href="../suexec.html">suexec</a>.  But unlike suexec,
it applies not only to CGI programs but to the entire request processing
cycle, including in-process applications and subprocesses.
It is ideally suited to running PHP applications under <strong>mod_php</strong>,
which is also incompatible with threaded MPMs.  It is also well-suited
to other in-process scripting applications such as <strong>mod_perl</strong>,
<strong>mod_python</strong>, and <strong>mod_ruby</strong>, and to
applications implemented in C as apache modules where privilege
separation is an issue.</p>

</div>
<div id="quickview"><a href="https://www.apache.org/foundation/contributing.html" class="badge"><img src="https://www.apache.org/images/SupportApache-small.png" alt="Support Apache!" /></a><h3>Topics</h3>
<ul id="topics">
<li><img alt="" src="../images/down.gif" /> <a href="#security">Security Considerations</a></li>
</ul><h3 class="directives">Directives</h3>
<ul id="toc">
<li><img alt="" src="../images/down.gif" /> <a href="#dtraceprivileges">DTracePrivileges</a></li>
<li><img alt="" src="../images/down.gif" /> <a href="#privilegesmode">PrivilegesMode</a></li>
<li><img alt="" src="../images/down.gif" /> <a href="#vhostcgimode">VHostCGIMode</a></li>
<li><img alt="" src="../images/down.gif" /> <a href="#vhostcgiprivs">VHostCGIPrivs</a></li>
<li><img alt="" src="../images/down.gif" /> <a href="#vhostgroup">VHostGroup</a></li>
<li><img alt="" src="../images/down.gif" /> <a href="#vhostprivs">VHostPrivs</a></li>
<li><img alt="" src="../images/down.gif" /> <a href="#vhostsecure">VHostSecure</a></li>
<li><img alt="" src="../images/down.gif" /> <a href="#vhostuser">VHostUser</a></li>
</ul>
<h3>Bugfix checklist</h3><ul class="seealso"><li><a href="https://www.apache.org/dist/httpd/CHANGES_2.4">httpd changelog</a></li><li><a href="https://bz.apache.org/bugzilla/buglist.cgi?bug_status=__open__&amp;list_id=144532&amp;product=Apache%20httpd-2&amp;query_format=specific&amp;order=changeddate%20DESC%2Cpriority%2Cbug_severity&amp;component=mod_privileges">Known issues</a></li><li><a href="https://bz.apache.org/bugzilla/enter_bug.cgi?product=Apache%20httpd-2&amp;component=mod_privileges">Report a bug</a></li></ul><h3>See also</h3>
<ul class="seealso">
<li><a href="#comments_section">Comments</a></li></ul></div>
<div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
<div class="section">
<h2><a name="security" id="security">Security Considerations</a></h2>

<p><code class="module"><a href="../mod/mod_privileges.html">mod_privileges</a></code> introduces new security concerns
in situations where <strong>untrusted code</strong> may be run
<strong>within the webserver process</strong>.  This applies to
untrusted modules, and scripts running under modules such as
mod_php or mod_perl.  Scripts running externally (e.g. as CGI
or in an appserver behind mod_proxy or mod_jk) are NOT affected.</p>

<p>The basic security concerns with mod_privileges are:</p>
<ul><li>Running as a system user introduces the same security issues
    as mod_suexec, and near-equivalents such as cgiwrap and suphp.</li>
<li>A privileges-aware malicious user extension (module or script)
    could escalate its privileges to anything available to the
    httpd process in any virtual host.  This introduces new risks
    if (and only if) mod_privileges is compiled with the
    <var>BIG_SECURITY_HOLE</var> option.</li>
<li>A privileges-aware malicious user extension (module or script)
    could escalate privileges to set its user ID to another system
    user (and/or group).</li>
</ul>

<p>The <code class="directive">PrivilegesMode</code> directive allows you to
select either <var>FAST</var> or <var>SECURE</var> mode.  You can
mix modes, using <var>FAST</var> mode for trusted users and
fully-audited code paths, while imposing SECURE mode where an
untrusted user has scope to introduce code.</p>
<p>Before describing the modes, we should also introduce the target
use cases: Benign vs Hostile.  In a benign situation, you want to
separate users for their convenience, and protect them and the server
against the risks posed by honest mistakes, but you trust your users
are not deliberately subverting system security.  In a hostile
situation - e.g. commercial hosting - you may have users deliberately
attacking the system or each other.</p>
<dl>
<dt>FAST mode</dt>
<dd>In <var>FAST</var> mode, requests are run in-process with the
selected uid/gid and privileges, so the overhead is negligible.
This is suitable for benign situations, but is not secure against an
attacker escalating privileges with an in-process module or script.</dd>
<dt>SECURE mode</dt>
<dd>A request in <var>SECURE</var> mode forks a subprocess, which
then drops privileges.  This is a very similar case to running CGI
with suexec, but for the entire request cycle, and with the benefit
of fine-grained control of privileges.</dd>
</dl>
<p>You can select different <code class="directive">PrivilegesMode</code>s for
each virtual host, and even in a directory context within a virtual
host.  <var>FAST</var> mode is appropriate where the user(s) are
trusted and/or have no privilege to load in-process code.
<var>SECURE</var> mode is appropriate to cases where untrusted code
might be run in-process.  However, even in <var>SECURE</var> mode,
there is no protection against a malicious user who is able to
introduce privileges-aware code running <em>before the start of the
request-processing cycle.</em></p>

</div>
<div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
<div class="directive-section"><h2><a name="DTracePrivileges" id="DTracePrivileges">DTracePrivileges</a> <a name="dtraceprivileges" id="dtraceprivileges">Directive</a></h2>
<table class="directive">
<tr><th><a href="directive-dict.html#Description">Description:</a></th><td>Determines whether the privileges required by dtrace are enabled.</td></tr>
<tr><th><a href="directive-dict.html#Syntax">Syntax:</a></th><td><code>DTracePrivileges On|Off</code></td></tr>
<tr><th><a href="directive-dict.html#Default">Default:</a></th><td><code>DTracePrivileges Off</code></td></tr>
<tr><th><a href="directive-dict.html#Context">Context:</a></th><td>server config</td></tr>
<tr><th><a href="directive-dict.html#Status">Status:</a></th><td>Experimental</td></tr>
<tr><th><a href="directive-dict.html#Module">Module:</a></th><td>mod_privileges</td></tr>
<tr><th><a href="directive-dict.html#Compatibility">Compatibility:</a></th><td>Available on Solaris 10 and OpenSolaris with
non-threaded MPMs (<code class="module"><a href="../mod/prefork.html">prefork</a></code> or custom MPM).</td></tr>
</table>
    <p>This server-wide directive determines whether Apache will run with
    the <a href="http://sosc-dr.sun.com/bigadmin/features/articles/least_privilege.jsp">privileges</a> required to run
    <a href="http://sosc-dr.sun.com/bigadmin/content/dtrace/">dtrace</a>.
    Note that <var>DTracePrivileges On</var> will not in itself
    activate DTrace, but <var>DTracePrivileges Off</var> will prevent
    it working.</p>

</div>
<div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
<div class="directive-section"><h2><a name="PrivilegesMode" id="PrivilegesMode">PrivilegesMode</a> <a name="privilegesmode" id="privilegesmode">Directive</a></h2>
<table class="directive">
<tr><th><a href="directive-dict.html#Description">Description:</a></th><td>Trade off processing speed and efficiency vs security against
malicious privileges-aware code.</td></tr>
<tr><th><a href="directive-dict.html#Syntax">Syntax:</a></th><td><code>PrivilegesMode FAST|SECURE|SELECTIVE</code></td></tr>
<tr><th><a href="directive-dict.html#Default">Default:</a></th><td><code>PrivilegesMode FAST</code></td></tr>
<tr><th><a href="directive-dict.html#Context">Context:</a></th><td>server config, virtual host, directory</td></tr>
<tr><th><a href="directive-dict.html#Status">Status:</a></th><td>Experimental</td></tr>
<tr><th><a href="directive-dict.html#Module">Module:</a></th><td>mod_privileges</td></tr>
<tr><th><a href="directive-dict.html#Compatibility">Compatibility:</a></th><td>Available on Solaris 10 and OpenSolaris with
non-threaded MPMs (<code class="module"><a href="../mod/prefork.html">prefork</a></code> or custom MPM).</td></tr>
</table><p>This directive trades off performance vs security against
malicious, privileges-aware code.  In <var>SECURE</var> mode, each request
runs in a secure subprocess, incurring a substantial performance penalty.
In <var>FAST</var> mode, the server is not protected against escalation
of privileges as discussed above.</p>
<p>This directive differs slightly between a <code>&lt;Directory&gt;</code>
	context (including equivalents such as Location/Files/If) and a
	top-level or <code>&lt;VirtualHost&gt;</code>.</p>
<p>At top-level, it sets a default that will be inherited by virtualhosts.
	In a virtual host, FAST or SECURE mode acts on the entire
	HTTP request, and any settings in a <code>&lt;Directory&gt;</code>
	context will be <strong>ignored</strong>.  A third pseudo-mode
	SELECTIVE defers the choice of FAST vs SECURE to directives in a
	<code>&lt;Directory&gt;</code> context.</p>
<p>In a <code>&lt;Directory&gt;</code> context, it is applicable only
	where SELECTIVE mode was set for the VirtualHost.  Only
	FAST or SECURE can be set in this context (SELECTIVE would be
meaningless).</p>
<div class="warning"><h3>Warning</h3>
	Where SELECTIVE mode is selected for a virtual host, the activation
	of privileges must be deferred until <em>after</em> the mapping
	phase of request processing has determined what
	<code>&lt;Directory&gt;</code> context applies to the request.
	This might give an attacker opportunities to introduce
	code through a <code class="directive"><a href="../mod/mod_rewrite.html#rewritemap">RewriteMap</a></code>
	running at top-level or <code>&lt;VirtualHost&gt;</code> context
	<em>before</em> privileges have been dropped and userid/gid set.
</div>

</div>
<div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
<div class="directive-section"><h2><a name="VHostCGIMode" id="VHostCGIMode">VHostCGIMode</a> <a name="vhostcgimode" id="vhostcgimode">Directive</a></h2>
<table class="directive">
<tr><th><a href="directive-dict.html#Description">Description:</a></th><td>Determines whether the virtualhost can run
subprocesses, and the privileges available to subprocesses.</td></tr>
<tr><th><a href="directive-dict.html#Syntax">Syntax:</a></th><td><code>VHostCGIMode On|Off|Secure</code></td></tr>
<tr><th><a href="directive-dict.html#Default">Default:</a></th><td><code>VHostCGIMode On</code></td></tr>
<tr><th><a href="directive-dict.html#Context">Context:</a></th><td>virtual host</td></tr>
<tr><th><a href="directive-dict.html#Status">Status:</a></th><td>Experimental</td></tr>
<tr><th><a href="directive-dict.html#Module">Module:</a></th><td>mod_privileges</td></tr>
<tr><th><a href="directive-dict.html#Compatibility">Compatibility:</a></th><td>Available on Solaris 10 and OpenSolaris with
non-threaded MPMs (<code class="module"><a href="../mod/prefork.html">prefork</a></code> or custom MPM).</td></tr>
</table>
    <p>Determines whether the virtual host is allowed to run fork and exec,
    the <a href="http://sosc-dr.sun.com/bigadmin/features/articles/least_privilege.jsp">privileges</a> required to run subprocesses.  If this is set to
    <var>Off</var> the virtualhost is denied the privileges and will not
    be able to run traditional CGI programs or scripts under the traditional
    <code class="module"><a href="../mod/mod_cgi.html">mod_cgi</a></code>, nor similar external programs such as those
    created by <code class="module"><a href="../mod/mod_ext_filter.html">mod_ext_filter</a></code> or
    <code class="directive"><a href="../mod/mod_rewrite.html#rewritemap">RewriteMap</a></code> <var>prog</var>.
    Note that it does not prevent CGI programs running under alternative
    process and security models such as <a href="https://httpd.apache.org/mod_fcgid/">mod_fcgid</a>, which is a recommended solution in Solaris.</p>
    <p>If set to <var>On</var> or <var>Secure</var>, the virtual host
    is permitted to run external programs and scripts as above.
    Setting <code class="directive">VHostCGIMode</code> <var>Secure</var> has
    the effect of denying privileges to the subprocesses, as described
    for <code class="directive">VHostSecure</code>.</p>

</div>
<div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
<div class="directive-section"><h2><a name="VHostCGIPrivs" id="VHostCGIPrivs">VHostCGIPrivs</a> <a name="vhostcgiprivs" id="vhostcgiprivs">Directive</a></h2>
<table class="directive">
<tr><th><a href="directive-dict.html#Description">Description:</a></th><td>Assign arbitrary privileges to subprocesses created
by a virtual host.</td></tr>
<tr><th><a href="directive-dict.html#Syntax">Syntax:</a></th><td><code>VHostCGIPrivs [+-]?<var>privilege-name</var> [[+-]?privilege-name] ...</code></td></tr>
<tr><th><a href="directive-dict.html#Default">Default:</a></th><td><code>None</code></td></tr>
<tr><th><a href="directive-dict.html#Context">Context:</a></th><td>virtual host</td></tr>
<tr><th><a href="directive-dict.html#Status">Status:</a></th><td>Experimental</td></tr>
<tr><th><a href="directive-dict.html#Module">Module:</a></th><td>mod_privileges</td></tr>
<tr><th><a href="directive-dict.html#Compatibility">Compatibility:</a></th><td>Available on Solaris 10 and OpenSolaris with
non-threaded MPMs (<code class="module"><a href="../mod/prefork.html">prefork</a></code> or custom MPM)
and when <code class="module"><a href="../mod/mod_privileges.html">mod_privileges</a></code> is compiled with the
<var>BIG_SECURITY_HOLE</var> compile-time option.</td></tr>
</table>
    <p><code class="directive">VHostCGIPrivs</code> can be used to assign arbitrary <a href="http://sosc-dr.sun.com/bigadmin/features/articles/least_privilege.jsp">privileges</a> to subprocesses created by a virtual host, as discussed
    under <code class="directive">VHostCGIMode</code>.  Each <var>privilege-name</var>
    is the name of a Solaris privilege, such as <var>file_setid</var>
    or <var>sys_nfs</var>.</p>

<p>A <var>privilege-name</var> may optionally be prefixed by
    + or -, which will respectively allow or deny a privilege.
    If used with neither + nor -, all privileges otherwise assigned
    to the virtualhost will be denied.  You can use this to override
    any of the default sets and construct your own privilege set.</p>

<div class="warning"><h3>Security</h3>
    <p>This directive can open huge security holes in apache subprocesses,
    up to and including running them with root-level powers.  Do not
    use it unless you fully understand what you are doing!</p></div>

</div>
<div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
<div class="directive-section"><h2><a name="VHostGroup" id="VHostGroup">VHostGroup</a> <a name="vhostgroup" id="vhostgroup">Directive</a></h2>
<table class="directive">
<tr><th><a href="directive-dict.html#Description">Description:</a></th><td>Sets the Group ID under which a virtual host runs.</td></tr>
<tr><th><a href="directive-dict.html#Syntax">Syntax:</a></th><td><code>VHostGroup <var>unix-groupid</var></code></td></tr>
<tr><th><a href="directive-dict.html#Default">Default:</a></th><td><code>Inherits the group id specified in
<code class="directive"><a href="../mod/mod_unixd.html#group">Group</a></code></code></td></tr>
<tr><th><a href="directive-dict.html#Context">Context:</a></th><td>virtual host</td></tr>
<tr><th><a href="directive-dict.html#Status">Status:</a></th><td>Experimental</td></tr>
<tr><th><a href="directive-dict.html#Module">Module:</a></th><td>mod_privileges</td></tr>
<tr><th><a href="directive-dict.html#Compatibility">Compatibility:</a></th><td>Available on Solaris 10 and OpenSolaris with
non-threaded MPMs (<code class="module"><a href="../mod/prefork.html">prefork</a></code> or custom MPM).</td></tr>
</table>
    <p>The <code class="directive">VHostGroup</code> directive sets the Unix group
    under which the server will process requests to a virtualhost.
    The group is set before the request is processed and reset afterwards
    using <a href="http://sosc-dr.sun.com/bigadmin/features/articles/least_privilege.jsp">Solaris Privileges</a>.  Since the setting applies to the
    <em>process</em>, this is not compatible with threaded MPMs.</p>
    <p><var>Unix-group</var> is one of:</p>
    <dl>
      <dt>A group name</dt>
      <dd>Refers to the given group by name.</dd>

<dt><code>#</code> followed by a group number.</dt>
      <dd>Refers to a group by its number.</dd>
    </dl>

<div class="warning"><h3>Security</h3>
    <p>This directive cannot be used to run apache as root!
    Nevertheless, it opens potential security issues similar to
    those discussed in the <a href="../suexec.html">suexec</a>
    documentation.</p></div>

<h3>See also</h3>
<ul>
<li><code class="directive"><a href="../mod/mod_unixd.html#group">Group</a></code></li>
<li><code class="directive"><a href="../mod/mod_suexec.html#suexecusergroup">SuexecUserGroup</a></code></li>
</ul>
</div>
<div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
<div class="directive-section"><h2><a name="VHostPrivs" id="VHostPrivs">VHostPrivs</a> <a name="vhostprivs" id="vhostprivs">Directive</a></h2>
<table class="directive">
<tr><th><a href="directive-dict.html#Description">Description:</a></th><td>Assign arbitrary privileges to a virtual host.</td></tr>
<tr><th><a href="directive-dict.html#Syntax">Syntax:</a></th><td><code>VHostPrivs [+-]?<var>privilege-name</var> [[+-]?privilege-name] ...</code></td></tr>
<tr><th><a href="directive-dict.html#Default">Default:</a></th><td><code>None</code></td></tr>
<tr><th><a href="directive-dict.html#Context">Context:</a></th><td>virtual host</td></tr>
<tr><th><a href="directive-dict.html#Status">Status:</a></th><td>Experimental</td></tr>
<tr><th><a href="directive-dict.html#Module">Module:</a></th><td>mod_privileges</td></tr>
<tr><th><a href="directive-dict.html#Compatibility">Compatibility:</a></th><td>Available on Solaris 10 and OpenSolaris with
non-threaded MPMs (<code class="module"><a href="../mod/prefork.html">prefork</a></code> or custom MPM)
and when <code class="module"><a href="../mod/mod_privileges.html">mod_privileges</a></code> is compiled with the
<var>BIG_SECURITY_HOLE</var> compile-time option.</td></tr>
</table>
    <p><code class="directive">VHostPrivs</code> can be used to assign arbitrary <a href="http://sosc-dr.sun.com/bigadmin/features/articles/least_privilege.jsp">privileges</a> to a virtual host.  Each <var>privilege-name</var>
    is the name of a Solaris privilege, such as <var>file_setid</var>
    or <var>sys_nfs</var>.</p>

<div class="warning"><h3>Security</h3>
    <p>This directive can open huge security holes in apache, up to
    and including running requests with root-level powers.  Do not
    use it unless you fully understand what you are doing!</p></div>

</div>
<div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
<div class="directive-section"><h2><a name="VHostSecure" id="VHostSecure">VHostSecure</a> <a name="vhostsecure" id="vhostsecure">Directive</a></h2>
<table class="directive">
<tr><th><a href="directive-dict.html#Description">Description:</a></th><td>Determines whether the server runs with enhanced security
for the virtualhost.</td></tr>
<tr><th><a href="directive-dict.html#Syntax">Syntax:</a></th><td><code>VHostSecure On|Off</code></td></tr>
<tr><th><a href="directive-dict.html#Default">Default:</a></th><td><code>VHostSecure On</code></td></tr>
<tr><th><a href="directive-dict.html#Context">Context:</a></th><td>virtual host</td></tr>
<tr><th><a href="directive-dict.html#Status">Status:</a></th><td>Experimental</td></tr>
<tr><th><a href="directive-dict.html#Module">Module:</a></th><td>mod_privileges</td></tr>
<tr><th><a href="directive-dict.html#Compatibility">Compatibility:</a></th><td>Available on Solaris 10 and OpenSolaris with
non-threaded MPMs (<code class="module"><a href="../mod/prefork.html">prefork</a></code> or custom MPM).</td></tr>
</table>
    <p>Determines whether the virtual host processes requests with
    security enhanced by removal of <a href="http://sosc-dr.sun.com/bigadmin/features/articles/least_privilege.jsp">Privileges</a> that are rarely needed in a webserver, but which are
    available by default to a normal Unix user and may therefore
    be required by modules and applications.  It is recommended that
    you retain the default (On) unless it prevents an application running.
    Since the setting applies to the <em>process</em>, this is not
    compatible with threaded MPMs.</p>
    <div class="note"><h3>Note</h3>
    <p>If <code class="directive">VHostSecure</code> prevents an application
    running, this may be a warning sign that the application should be
    reviewed for security.</p></div>

</div>
<div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
<div class="directive-section"><h2><a name="VHostUser" id="VHostUser">VHostUser</a> <a name="vhostuser" id="vhostuser">Directive</a></h2>
<table class="directive">
<tr><th><a href="directive-dict.html#Description">Description:</a></th><td>Sets the User ID under which a virtual host runs.</td></tr>
<tr><th><a href="directive-dict.html#Syntax">Syntax:</a></th><td><code>VHostUser <var>unix-userid</var></code></td></tr>
<tr><th><a href="directive-dict.html#Default">Default:</a></th><td><code>Inherits the userid specified in
<code class="directive"><a href="../mod/mod_unixd.html#user">User</a></code></code></td></tr>
<tr><th><a href="directive-dict.html#Context">Context:</a></th><td>virtual host</td></tr>
<tr><th><a href="directive-dict.html#Status">Status:</a></th><td>Experimental</td></tr>
<tr><th><a href="directive-dict.html#Module">Module:</a></th><td>mod_privileges</td></tr>
<tr><th><a href="directive-dict.html#Compatibility">Compatibility:</a></th><td>Available on Solaris 10 and OpenSolaris with
non-threaded MPMs (<code class="module"><a href="../mod/prefork.html">prefork</a></code> or custom MPM).</td></tr>
</table>
    <p>The <code class="directive">VHostUser</code> directive sets the Unix userid
    under which the server will process requests to a virtualhost.
    The userid is set before the request is processed and reset afterwards
    using <a href="http://sosc-dr.sun.com/bigadmin/features/articles/least_privilege.jsp">Solaris Privileges</a>.  Since the setting applies to the
    <em>process</em>, this is not compatible with threaded MPMs.</p>
    <p><var>Unix-userid</var> is one of:</p>
    <dl>
      <dt>A username</dt>
      <dd>Refers to the given user by name.</dd>

<dt><code>#</code> followed by a user number.</dt>
      <dd>Refers to a user by its number.</dd>
    </dl>

<h3>See also</h3>
<ul>
<li><code class="directive"><a href="../mod/mod_unixd.html#user">User</a></code></li>
<li><code class="directive"><a href="../mod/mod_suexec.html#suexecusergroup">SuexecUserGroup</a></code></li>
</ul>
</div>
</div>
<div class="bottomlang">
<p><span>Available Languages: </span><a href="../en/mod/mod_privileges.html" title="English">&nbsp;en&nbsp;</a> |
<a href="../fr/mod/mod_privileges.html" hreflang="fr" rel="alternate" title="Français">&nbsp;fr&nbsp;</a></p>
</div><div class="top"><a href="#page-header"><img src="../images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&amp;A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Libera.chat, or sent to our <a href="https://httpd.apache.org/lists.html">mailing lists</a>.</div>
<script type="text/javascript"><![CDATA[//><!]]></script></div><div id="footer">
<p class="apache">Copyright 2023 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
<p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p></div><script type="text/javascript"><![CDATA[//><!]]></script>
</body></html>

${this.title}

Code Editor : mod_privileges.html.en