On Apr 27, 2010, at 11:51 AM, Mark Ritchie wrote:
On 27/Apr/2010, at 11:44 AM, Mark Ritchie wrote:
On 27/Apr/2010, at 11:39 AM, Chuck Hill wrote:
What do you think about "undoing" this in the Wonder version?
I think that it's not a great idea... That's why I didn't advocate
that direction. ;-)
To be clear, I don't advocate changing the log file to be world
writable.
Why not? It is a log file, it is for debugging. How serious is this
security issue really compared to having debug log files that few will
ever figure out how to make work? Either I am missing something, or
that is a trade off that I'd be willing to look at.
If someone has ideas about how to change the ownership of the log
file so that the child processes can append to it then I'm totally
in favour! It would need to be supported in all versions of Apache
and should not break when compiled for other webservers. ;-)
M.
--
Chuck Hill Senior Consultant / VP Development
Practical WebObjects - for developers who want to increase their
overall knowledge of WebObjects or who are trying to solve specific
problems.
http://www.global-village.net/products/practical_webobjects
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Webobjects-dev mailing list ([email protected])
Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/webobjects-dev/archive%40mail-archive.com
This email sent to [email protected]
