This all looks good to me.   The one thing I wonder about changing:

> By default, the stack has READ, WRITE, and EXECUTE permissions. The EXECUTE 
> setting exists for historical reasons. It is rarely if ever needed and is 
> generally considered to be a potential security risk. Removing EXECUTE 
> permission from the stack is a recommended practice:
> 
>     STACK {
>             FLAGS -= EXECUTE;
>     };

Is there any reason to not just say "If you're using a version 2 mapfile,
stack is non-executable by default, and you have to explicitly add it in
the very few cases it's needed" ?

-- 
        -Alan Coopersmith-           alan.coopersmith at sun.com
         Sun Microsystems, Inc. - X Window System Engineering

Reply via email to