On Friday 02 March 2012, Steinar H. Gunderson wrote: > On Fri, Mar 02, 2012 at 11:06:47PM +0100, Stefan Fritsch wrote: > > There is now mod_privileges included upstream, which does > > something similar to mpm itk but using Solaris privileges. It > > would be interesting to check if ITK could use the same hooks > > and stop being a MPM but become a normal module. Maybe you or > > one of your fellow developers could have a look at it. > > That's interesting -- especially given how intensely Apache > upstream has refused mpm-itk for ages and this seems very similar > (but less portable). I'll have a look, but I'm pretty sure there > won't be anything in time for the freeze; a straight port is what > I'm aiming for.
I guess upstream has changed, too. But to be honest, Solaris privileges are somewhat more suited to the problem than Linux capabilities: CAP_SETUID means immediate full root privileges but under Solaris, you need to have all privileges to be able to setuid to root. Cheers, Stefan -- To UNSUBSCRIBE, email to debian-apache-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/201203022326.43762...@sfritsch.de