Return to security.txt CVS log

Up to [ELWIX - Embedded LightWeight unIX -] / embedaddon / lighttpd / doc / outdated

Annotation of embedaddon/lighttpd/doc/outdated/security.txt, revision 1.1

1.1     ! misho       1: =================
        !             2: Security Features
        !             3: =================
        !             4: 
        !             5: ------------
        !             6: Module: core
        !             7: ------------
        !             8: 
        !             9: :Author: Jan Kneschke
        !            10: :Date: $Date: 2004/08/29 09:44:53 $
        !            11: :Revision: $Revision: 1.2 $
        !            12: 
        !            13: :abstract:
        !            14:   lighttpd was developed with security in mind ...
        !            15: 
        !            16: .. meta::
        !            17:   :keywords: lighttpd, security
        !            18: 
        !            19: .. contents:: Table of Contents
        !            20: 
        !            21: Description
        !            22: ===========
        !            23: 
        !            24: Limiting POST requests
        !            25: ----------------------
        !            26: 
        !            27: 
        !            28: 
        !            29: ::
        !            30: 
        !            31:    server.max-request-size = <kbyte>
        !            32: 
        !            33: System Security
        !            34: ---------------
        !            35: 
        !            36: Running daemons as root with full privileges is a bad idea in general.
        !            37: lighttpd runs best without any extra privileges and runs perfectly in chroot.
        !            38: 
        !            39: Change Root
        !            40: ```````````
        !            41: 
        !            42: server.chroot = "..."
        !            43: 
        !            44: Drop root privileges
        !            45: ````````````````````
        !            46: 
        !            47: server.username = "..."
        !            48: server.groupname = "..."
        !            49: 
        !            50: FastCGI
        !            51: ```````
        !            52: 
        !            53: fastcgi + chroot
        !            54: 
        !            55: Permissions
        !            56: ```````````
        !            57: 
        !            58: ::
        !            59: 
        !            60:   $ useradd wwwrun ...