[LUGOS] web server z full privilege separationom

[Rok Potočnik]

Jure Pečar wrote:
> apache mpm itk si že pogledal?

glede na spletno stran nobena apache* resitev ni produkcijska...

http://wiki.apache.org/httpd/PrivilegeSeparation
...
MPM-ITK, on the other hand, processes request headers under root, 
switches to the target userid, and then kills the httpd process when 
finished serving the connection. As discussed above, this has serious 
security and performance implications.
At the present time, you should only attempt to use one of these MPMs if 
you fully understand the security and performance trade-offs involved.


-- 
LP, Rok