Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add a warning about using same user for cli and web server #6517

Closed
wants to merge 3 commits into from
Closed

Add a warning about using same user for cli and web server #6517

Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
ee471b9
Add a warning about using same user for cli and web server
pasdeloup Apr 27, 2016
21625e3
Replace message by a lighter caution
pasdeloup Apr 28, 2016
2799431
Fix caution indentation
pasdeloup May 6, 2016
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 6 additions & 0 deletions book/installation.rst
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -228,6 +228,12 @@ If there are any issues, correct them now before moving on.
configuration (e.g. commonly httpd.conf or apache2.conf for Apache) and setting
its user to be the same as your CLI user (e.g. for Apache, update the ``User``
and ``Group`` values).

.. caution::

If used in a production environment, be sure this user only has limited privileges
(no access to private data or servers, launch of unsafe binaries, etc.)
as a compromised server would give to the hacker those privileges.

**2. Using ACL on a system that supports chmod +a (MacOS X)**

Expand Down