On 4/1/08 11:21 AM, "Torsten Foertsch" <[EMAIL PROTECTED]> wrote:

> On Tue 01 Apr 2008, Akins, Brian wrote:
>> In pseudo config, like niq is suggesting, you could have something like:
>> 
>> <If HTTP_HEADER{Host} =~ cnn\.com$ || TCPPort == 8080>
>>    #cnn specific stuff here...
>>    DocumentRoot /htdocs/cnn
>>    CutomLog "|/usr/bin/logger cnn" my_format
>>    ErrorLog /var/log/cnn.error
>> </If>
> 
> I don't like that. I think there are security considerations why logfiles are
> opened from the parent process as root. But with other logging mechanisms
> that provide write-only semantics it is good. In my setup the apache logs to
> a named pipe to a process outside the chroot.

The example wasn't about logs, it was just an example of how, if you wanted,
could do virtual hosts using niq's if/else style.  Nothing says that the
logs wouldn't be opened in parent by root.  If log config was per dir (which
we "emulate" with env variables) this would "just work."


> As I understood it the main problem with the current mod_rewrite based config
> is that it is too complex. The new language has to watch out not to end at
> the same place. One thing that I think is messy is the use of subprocess_env
> to pass information from module to module and even from administrator to
> module: no-gzip, force-gzip, downgrade-1.0, nokeepalive, redirect-carefully
> etc.


+1 to all that...

-- 
Brian Akins
Chief Operations Engineer
Turner Digital Media Technologies

Reply via email to