diff options
| author | Stefan Fritsch <sf@debian.org> | 2011-12-03 17:26:13 +0000 |
|---|---|---|
| committer | Stefan Fritsch <sf@sfritsch.de> | 2012-01-02 10:37:15 +0100 |
| commit | c4b58d7024bbfa9f7f0920bb8319750fba10d538 (patch) | |
| tree | 63933ff2bb7e42ac6cdb9ea1fea0a884ff47ec5f /debian | |
| parent | b120692f5cd830a753e55bb8baa5f51fe869c1d0 (diff) | |
| download | apache2-c4b58d7024bbfa9f7f0920bb8319750fba10d538.tar.gz | |
Mention dpkg-statoverride for changing permissions of suexec
git-svn-id: svn+ssh://svn.debian.org/svn/pkg-apache/trunk/apache2@1373 01b336ce-410b-0410-9a02-a0e7f243c266
Diffstat (limited to 'debian')
| -rw-r--r-- | debian/changelog | 1 | ||||
| -rw-r--r-- | debian/suexec.8 | 6 |
2 files changed, 5 insertions, 2 deletions
diff --git a/debian/changelog b/debian/changelog index 67f42828..648654f5 100644 --- a/debian/changelog +++ b/debian/changelog @@ -3,6 +3,7 @@ apache2 (2.2.21-3) UNRELEASED; urgency=low * Fix CVE-2011-4317: Prevent unintended pattern expansion in some reverse proxy configurations. (Similar to CVE-2011-3368, but different attack vector.) + * Mention dpkg-statoverride for changing permissions of suexec. LP: #897120 * Fix broken link in docs. Closes: #650528 * Remove Tollef Fog Heen, Thom May, and Peter Samuelson from uploaders. Thanks for your work in the past. diff --git a/debian/suexec.8 b/debian/suexec.8 index b3e08c41..421fe90e 100644 --- a/debian/suexec.8 +++ b/debian/suexec.8 @@ -41,7 +41,8 @@ package. If suexec is called by a user with name 'username', it will look into /etc/apache2/suexec/username for configuration. If the file does not exist, suexec will abort. By creating several config files, you can allow several -different apache run users to use suexec. +different apache run users to use suexec. You may need to change the +permissions of /usr/lib/apache2/suexec with dpkg-statoverride. .PP The first line in the file is used as the document root (/var/www in the standard suexec) and the second line in the file is used as the suffix that is @@ -64,4 +65,5 @@ was built. No other action is taken. .BR /etc/apache2/suexec/www-data .SH SEE ALSO .BR apache2(8) , -.BR /usr/share/doc/apache2.2-common/README.Debian.gz +.BR /usr/share/doc/apache2.2-common/README.Debian.gz , +.BR dpkg-statoverride(8) |