Return-Path: Delivered-To: apmail-httpd-dev-archive@www.apache.org Received: (qmail 97085 invoked from network); 27 Jun 2007 18:01:52 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.2) by minotaur.apache.org with SMTP; 27 Jun 2007 18:01:52 -0000 Received: (qmail 99131 invoked by uid 500); 27 Jun 2007 18:01:51 -0000 Delivered-To: apmail-httpd-dev-archive@httpd.apache.org Received: (qmail 99079 invoked by uid 500); 27 Jun 2007 18:01:51 -0000 Mailing-List: contact dev-help@httpd.apache.org; run by ezmlm Precedence: bulk Reply-To: dev@httpd.apache.org list-help: list-unsubscribe: List-Post: List-Id: Delivered-To: mailing list dev@httpd.apache.org Received: (qmail 99068 invoked by uid 99); 27 Jun 2007 18:01:51 -0000 Received: from herse.apache.org (HELO herse.apache.org) (140.211.11.133) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 27 Jun 2007 11:01:51 -0700 X-ASF-Spam-Status: No, hits=-0.0 required=10.0 tests=SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (herse.apache.org: domain of jslive@gmail.com designates 64.233.184.238 as permitted sender) Received: from [64.233.184.238] (HELO wr-out-0506.google.com) (64.233.184.238) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 27 Jun 2007 11:01:47 -0700 Received: by wr-out-0506.google.com with SMTP id 55so198411wri for ; Wed, 27 Jun 2007 11:01:27 -0700 (PDT) DKIM-Signature: a=rsa-sha1; c=relaxed/relaxed; d=gmail.com; s=beta; h=domainkey-signature:received:received:message-id:date:from:sender:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references:x-google-sender-auth; b=b3wGfQo4gTV5JwlrSVtgd0R0YJzT3f5NJQKjGyuJG33euXU9vy1zzdI/lJY5gx2mPK48fVlQyjtBS5hxrqnsu7B3csoiUfSDaeMjqHbhEUOp1DEBTmLb5KlCwHo0xit2QwArm2tIbveEd3BEZXE5UIQuXgzjMQE389iBWpZGz34= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=beta; h=received:message-id:date:from:sender:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references:x-google-sender-auth; b=MXgmx250TNb9xqZcIYX31q0JEavVOx1z9O9QoygTJLWXA+pay6XqM3rPpAMkiJwgU1/QKqe8Qx/zl3uX/1hxdbXORwNk7HSO7mBl5PwxoxT3X5FahzzoDSxdcAB9v54f9bFnjekV2BsyVhMUhlTyDdApt4EUKD9z8HcSTou2AQw= Received: by 10.115.108.1 with SMTP id k1mr730649wam.1182967286377; Wed, 27 Jun 2007 11:01:26 -0700 (PDT) Received: by 10.114.53.5 with HTTP; Wed, 27 Jun 2007 11:01:26 -0700 (PDT) Message-ID: Date: Wed, 27 Jun 2007 14:01:26 -0400 From: "Joshua Slive" Sender: jslive@gmail.com To: dev@httpd.apache.org Subject: Re: Inclusion of mpm-itk into HEAD In-Reply-To: <20070627161644.338acb64@grimnir> MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline References: <20070617194733.GA17515@uio.no> <88e286470706242136i3f57b6fkd65012186c9be653@mail.gmail.com> <84B7E9D8-8E53-446F-BC2C-5A4BBFAD21D8@rcbowen.com> <20070627161644.338acb64@grimnir> X-Google-Sender-Auth: 76861f8d3b546076 X-Virus-Checked: Checked by ClamAV on apache.org On 6/27/07, Nick Kew wrote: > This is a problem that could be solved by documentation. > Maybe not quite as simple, but when the alternative is accepting > new connections whilst running as root. Here's a start: http://wiki.apache.org/httpd/Recipes/Privilege_Separation It could use lots of polishing. Joshua.