The following reply was made to PR mod_log-any/2352; it has been noted by GNATS.

From: Dean Gaudet <[EMAIL PROTECTED]>
To: Curtis Wood <[EMAIL PROTECTED]>
Cc: [EMAIL PROTECTED]
Subject: Re: mod_log-any/2352: The limited number of VIRTUAL DOMAINS...
Date: Sat, 6 Jun 1998 12:39:35 -0700 (PDT)

 On 4 Jun 1998, Curtis Wood wrote:
 
 >   I'm assuming that the reasoning behind keeping the file descriptors open 
 > for each
 > and every log is for speed, not having to open and close the file each and 
 > every time
 > the given log has to be updated, seems logical.
 
 It's also for security.  The children do not run as root.  Unless you use
 suexec, CGIs run as the same uid as the children.  Therefore if the
 children can open logs to write on them, then so could CGIs.  This could
 compromise the logs.
 
 > more servers requiring access to the same log at the same time. The solution 
 > comes from
 > having an external application do all the logging and communicate with all 
 > the servers
 > via a message que.
 
 This is what piped logs are for.
 
 Dean
 

Reply via email to