PAL.C.T MINI SHELL
<?xml version="1.0" encoding="EUC-KR"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" lang="ko" xml:lang="ko"><head>
<meta content="text/html; charset=EUC-KR" http-equiv="Content-Type" />
<!--
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
This file is generated from xml source: DO NOT EDIT
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
-->
<title>suEXEC - Apache HTTP Server Version 2.4</title>
<link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" />
<link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" />
<link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /><link rel="stylesheet" type="text/css" href="./style/css/prettify.css" />
<script src="./style/scripts/prettify.min.js" type="text/javascript">
</script>
<link href="./images/favicon.ico" rel="shortcut icon" /></head>
<body id="manual-page"><div id="page-header">
<p class="menu"><a href="./mod/"></a> | <a href="./mod/directives.html">þ</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html"></a> | <a href="./sitemap.html">Ʈ</a></p>
<p class="apache">Apache HTTP Server Version 2.4</p>
<img alt="" src="./images/feather.gif" /></div>
<div class="up"><a href="./"><img title="<-" alt="<-" src="./images/left.gif" /></a></div>
<div id="path">
<a href="http://www.apache.org/">Apache</a> > <a href="http://httpd.apache.org/">HTTP Server</a> > <a href="http://httpd.apache.org/docs/">Documentation</a> > <a href="./">Version 2.4</a></div><div id="page-content"><div id="preamble"><h1>suEXEC </h1>
<div class="toplang">
<p><span> : </span><a href="./en/suexec.html" hreflang="en" rel="alternate" title="English"> en </a> |
<a href="./fr/suexec.html" hreflang="fr" rel="alternate" title="Français"> fr </a> |
<a href="./ja/suexec.html" hreflang="ja" rel="alternate" title="Japanese"> ja </a> |
<a href="./ko/suexec.html" title="Korean"> ko </a> |
<a href="./tr/suexec.html" hreflang="tr" rel="alternate" title="Türkçe"> tr </a></p>
</div>
<div class="outofdate"> ֽ ƴմϴ.
ֱٿ ϼ.</div>
<p><strong>suEXEC</strong> ġ <strong>CGI</strong>
<strong>SSI</strong> α ID
ƴ ٸ ID ϵ Ѵ. CGI SSI α
ϸ ڿ ڷ Ѵ.</p>
<p> ϸ ڰ CGI SSI α
ϰ Ҷ ִ
ִ. suEXEC ϰ Ǹ
ǻͿ ο ִ. <em>setuid root</em>
α ̷ α ϴٸ suEXEC
ʱ ٶ.</p>
</div>
<div id="quickview"><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#before">ϱ </a></li>
<li><img alt="" src="./images/down.gif" /> <a href="#model">suEXEC ȸ</a></li>
<li><img alt="" src="./images/down.gif" /> <a href="#install">suEXEC ġ</a></li>
<li><img alt="" src="./images/down.gif" /> <a href="#enable">suEXEC Ű </a></li>
<li><img alt="" src="./images/down.gif" /> <a href="#usage">suEXEC ϱ</a></li>
<li><img alt="" src="./images/down.gif" /> <a href="#debug">suEXEC ϱ</a></li>
<li><img alt="" src="./images/down.gif" /> <a href="#jabberwock">ٽ ѹ ϶: </a></li>
</ul><ul class="seealso"><li><a href="#comments_section">Comments</a></li></ul></div>
<div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
<div class="section">
<h2><a name="before" id="before">ϱ </a></h2>
<p>ϱ 켱 ġ .</p>
<p> <strong>setuid</strong> <strong>setgid</strong>
н ü Ѵٰ Ѵ.
ɾ 鵵 Ѵ. suEXEC ϴ ٸ ÷
ϴٸ ٸ ִ.</p>
<p>ι°, ǻ ⺻ ͼϴٰ
Ѵ. <strong>setuid/setgid</strong> ɰ
̵ ý۰ ȿ ġ ذ Եȴ.</p>
<p>°, suEXEC ڵ <strong></strong>
Ѵٰ Ѵ. ڿ Ÿ͵
suEXEC õ ڵ带 ɽ ϰ ˻ߴ.
ڵ带 ϰ ϰ Ȯ ϱ Ǹ
. ڵ带 ϸ ġ ο
ִ. αֿ ſ ˰
ڵ带 캸 ġ ۾ ǻ簡 ٸ
suEXEC ڵ带 ʱ <strong></strong> Ѵ.</p>
<p>° , ġ suEXEC ġ
⺻ġ <strong>ʱ</strong> ߴ. ᱹ
ڰ Ǹ ￩ suEXEC ؾ Ѵ. suEXEC
ڴ Ϲ ġ suEXEC
ġ ִ. suEXEC ϴ ý å
ڴ ְ 캸 ؾ Ѵ.
̷ suEXEC Ҹŭ ְ ȣ
suEXEC ϵ ġ ϱ ̴.</p>
<p> ϱ ϴ°? ? . !</p>
</div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
<div class="section">
<h2><a name="model" id="model">suEXEC ȸ</a></h2>
<p>suEXEC ϰ ġϱ 츮 ȸ
Ѵ. ̸ Ȯ suEXEC ȿ Ͼ
ý ؾ
ִ.</p>
<p><strong>suEXEC</strong> ġ θ setuid
"wrapper" α Ѵ. wrapper ڰ
ּ ٸ userid ϵ CGI SSI α
HTTP û Ҹ. ̷ û ġ suEXEC
wrapper α α ڿ
ID Ѵ.</p>
<p> wrapper и Ѵ.
ϳ ϸ α з ϵǰ
Ѵ. Ѵ:</p>
<ol>
<li>
<strong>wrapper ϴ ڰ ý
ΰ?</strong>
<p class="indent">
wrapper ϴ ڰ ý
ȮѴ.
</p>
</li>
<li>
<strong> ƱԸƮ wrapper ϴ°?</strong>
<p class="indent">
wrapper ƱԸƮ ־߸ ȴ.
ġ ȴ. wrapper
ƱԸƮ ϸ ŷǾų ġ suEXEC
ִ ̴.
</p>
</li>
<li>
<strong> ڰ wrapper ϵ Ǿ?</strong>
<p class="indent">
ڰ wrapper ϵ Ǿ?
(ġ ) α
ִ.
</p>
</li>
<li>
<strong> CGI SSI α
°?</strong>
<p class="indent">
CGI SSI α '/' ϰų
'..' °? ̵ . CGI/SSI
α suEXEC root (Ʒ
<code>--with-suexec-docroot=<em>DIR</em></code> )
־ Ѵ.
</p>
</li>
<li>
<strong> ڸ ȿѰ?</strong>
<p class="indent">
ڰ ϴ°?
</p>
</li>
<li>
<strong> ȿѰ?</strong>
<p class="indent">
ϴ°?
</p>
</li>
<li>
<strong> ڰ superuser <em>ƴѰ</em>?</strong>
<p class="indent">
suEXEC <code><em>root</em></code> CGI/SSI
α Ѵ.
</p>
</li>
<li>
<strong> userid ּ ID ں <em>ū</em>?</strong>
<p class="indent">
ּ ID ڸ Ѵ. CGI/SSI
α ִ userid ּġ
ִ. "ýۿ" Ҷ ϴ.
</p>
</li>
<li>
<strong> superuser <em>ƴѰ</em>?</strong>
<p class="indent">
suEXEC <code><em>root</em></code> CGI/SSI
α Ѵ.
</p>
</li>
<li>
<strong> groupid ּ ID ں <em>ū</em>?</strong>
<p class="indent">
ּ ID ڸ Ѵ. CGI/SSI
α ִ groupid ּġ
ִ. "ýۿ" Ҷ ϴ.
</p>
</li>
<li>
<strong>wrapper ڿ
ִ°?</strong>
<p class="indent">
ܰ迡 α setuid setgid ȣ Ͽ
ڿ ȴ. , ٸ
ڰ ش ʱȭȴ.
</p>
</li>
<li>
<strong>CGI/SSI α ִ 丮 丮
ִ°?</strong>
<p class="indent">
丮 ʴٸ . ̰
丮 ٸ 丮
̴.
</p>
</li>
<li>
<strong>丮 ġ ȿ ִ°?</strong>
<p class="indent">
Ϲ κ û ûϴ 丮
suEXEC root Ʒ ִ°? UserDir û
ûϴ 丮 suEXEC userdir (<a href="#install">suEXEC ɼ</a> ) 丮
Ʒ ִ°?
</p>
</li>
<li>
<strong>ٸ 丮 <em>°</em>?</strong>
<p class="indent">
丮 ٸ α ʴ´.
ڸ 丮 ִ.
</p>
</li>
<li>
<strong> CGI/SSI α ϴ°?</strong>
<p class="indent">
ʴٸ .
</p>
</li>
<li>
<strong>ٸ CGI/SSI α
<em>°</em>?</strong>
<p class="indent">
ڿ CGI/SSI α ϱ ʴ´.
</p>
</li>
<li>
<strong> CGI/SSI α setuid setgid
<em>ƴѰ</em>?</strong>
<p class="indent">
츮 α ٽ UID/GID ϱ ʴ´.
</p>
</li>
<li>
<strong> / α / ?</strong>
<p class="indent">
ڰ ΰ?
</p>
</li>
<li>
<strong> μ ȯ溯 û
ִ°?</strong>
<p class="indent">
suEXEC ( ) PATH ,
(̰͵ ) ȯ溯 Ͽ ŵ
μ ȯ溯 .
</p>
</li>
<li>
<strong> CGI/SSI α
ִ°?</strong>
<p class="indent">
⼭ suEXEC CGI/SSI α Ѵ.
</p>
</li>
</ol>
<p>̰ suEXEC wrapper ȸ ǥ ̴. ټ
ϰ CGI/SSI 迡 ο , ο
ΰ Ѵܰ辿 ɽ .</p>
<p> ִ
suEXEC ִ
<a href="#jabberwock">"ٽ ѹ ϶"</a>
϶.</p>
</div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
<div class="section">
<h2><a name="install" id="install">suEXEC ġ</a></h2>
<p> ִ Ѵ.</p>
<p><strong>suEXEC ɼ</strong><br />
</p>
<dl>
<dt><code>--enable-suexec</code></dt>
<dd> ɼ ⺻ ġǰų Ȱȭʴ suEXEC
ȰȭѴ. APACI suEXEC Ƶ̷
<code>--enable-suexec</code> ɼǿܿ
<code>--with-suexec-xxxxx</code> ɼ ּ Ѱ
ʿϴ.</dd>
<dt><code>--with-suexec-bin=<em>PATH</em></code></dt>
<dd><code>suexec</code> ̳ʸ δ Ȼ
ϵǾ Ѵ. ⺻ Ϸ ɼ
Ѵ. <em> </em>
<code>--with-suexec-bin=/usr/sbin/suexec</code></dd>
<dt><code>--with-suexec-caller=<em>UID</em></code></dt>
<dd> ġ ϴ <a href="mod/mpm_common.html#user">ڸ</a>. α
ִ ڴ.</dd>
<dt><code>--with-suexec-userdir=<em>DIR</em></code></dt>
<dd>suEXEC Ǵ Ȩ丮 丮
Ѵ. 丮 ִ
suEXEC Ƿ, α "ؾ" Ѵ. (
, "*" ) "" UserDir þ Ѵٸ
ؾ Ѵ. UserDir þ passwd Ͽ
Ȩ丮 ٸ suEXEC
۵ ʴ´. ⺻ "public_html"̴.<br />
ȣƮ ٸ UserDir Ѵٸ
θ 丮 ȿ ֵ ؾ ϰ, θ 丮
´. <strong>̷ , "~userdir"
cgi û ۵ ʴ´!</strong></dd>
<dt><code>--with-suexec-docroot=<em>DIR</em></code></dt>
<dd>ġ DocumentRoot Ѵ. ̴ suEXEC
ִ (UserDirs ) ̴. ⺻ 丮
<code>--datadir</code> "/htdocs" ̴.
<em> </em> "<code>--datadir=/home/apache</code>"
ߴٸ suEXEC wrapper document root
"/home/apache/htdocs" 丮 Ѵ.</dd>
<dt><code>--with-suexec-uidmin=<em>UID</em></code></dt>
<dd>suEXEC ּ UID Ѵ.
κ ýۿ 500̳ 100 ϴ. ⺻
100̴.</dd>
<dt><code>--with-suexec-gidmin=<em>GID</em></code></dt>
<dd>suEXEC ּ GID Ѵ.
κ ýۿ 100 ϹǷ ⺻̴.</dd>
<dt><code>--with-suexec-logfile=<em>FILE</em></code></dt>
<dd> suEXEC ۵ (ó )
αϸ Ѵ. ⺻ α ̸
"suexec_log"̰ ǥ α 丮
(<code>--logfiledir</code>) ġѴ.</dd>
<dt><code>--with-suexec-safepath=<em>PATH</em></code></dt>
<dd>CGI Ͽ Ѱ PATH ȯ溯 Ѵ.
⺻ "/usr/local/bin:/usr/bin:/bin"̴.</dd>
</dl>
<p><strong>suEXEC wrapper ϰ ġϱ</strong><br />
<code>--enable-suexec</code> ɼ suEXEC ϰ
<code>make</code> ɾ ϸ <code>suexec</code>
(ġ Բ) ڵ .<br />
<code>make install</code> ɾ
Ͽ ġ ִ. ̳ʸ <code>suexec</code>
<code>--sbindir</code> ɼ 丮 ġȴ.
⺻ ġ "/usr/local/apache2/sbin/suexec"̴.<br />
ġ <strong><em>root </em></strong> ʿ
϶. wrapper ID ϱؼ ڰ
<code><em>root</em></code>̰ ϸ setuserid Ʈ
Ǿ Ѵ.</p>
<p><strong> Ѽ</strong><br />
suEXEC wrapper ڽ ڰ ɼ
<code>--with-suexec-caller</code> ùٸ
Ȯ , ˻ suEXEC ϴ ýȣ
Ȥ ̺귯 Լ ۵Ǿ ִ. ̸ ϸ
Ϲ ̹Ƿ ġ ϴ 츸
suEXEC ֵ Ͻý ؾ Ѵ.</p>
<p> , ϰ:</p>
<div class="example"><p><code>
User www<br />
Group webgroup<br />
</code></p></div>
<p><code>suexec</code> "/usr/local/apache2/sbin/suexec"
ġϿٸ, ؾ Ѵ:</p>
<div class="example"><p><code>
chgrp webgroup /usr/local/apache2/bin/suexec<br />
chmod 4750 /usr/local/apache2/bin/suexec<br />
</code></p></div>
<p> ġ ϴ 츸 suEXEC wrapper
ִ.</p>
</div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
<div class="section">
<h2><a name="enable" id="enable">suEXEC Ű </a></h2>
<p>ġ Ҷ <code>--sbindir</code> ɼ
丮 <code>suexec</code> (⺻
"/usr/local/apache2/sbin/suexec") ã´. ġ
suEXEC wrapper ߰ϸ α(error
log) Ѵ:</p>
<div class="example"><p><code>
[notice] suEXEC mechanism enabled (wrapper: <em>/path/to/suexec</em>)
</code></p></div>
<p> ߿ ̷ ٸ ҿ
wrapper α ã ߰ų, <em>setuid
root</em> ġʾұ ̴.</p>
<p>ó suEXEC ϰ Ͱ ̹ ġ
̶, ġ ̰ ٽ ؾ Ѵ.
HUP̳ USR1 ñ׳η ϴ δ ʴ. </p>
<p>suEXEC ȻϷ <code>suexec</code>
ġ ̰ ؾ Ѵ. </p>
</div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
<div class="section">
<h2><a name="usage" id="usage">suEXEC ϱ</a></h2>
<p>CGI α û <code class="directive"><a href="./mod/mod_suexec.html#suexecusergroup">SuexecUserGroup</a></code> þ
ȣƮ û Ͽų <code class="module"><a href="./mod/mod_userdir.html">mod_userdir</a></code>
û óϴ 쿡 suEXEC wrapper ȣѴ.</p>
<p><strong>ȣƮ:</strong><br /> suEXEC wrapper
ϴ Ѱ <code class="directive"><a href="./mod/core.html#virtualhost">VirtualHost</a></code> ǿ <code class="directive"><a href="./mod/mod_suexec.html#suexecusergroup">SuexecUserGroup</a></code> þ
ϴ ̴. þ ּ ID ٸ
ϸ CGI ڿ û <code class="directive"><a href="./mod/core.html#virtualhost"><VirtualHost></a></code>
<em>User</em> <em>Group</em> ȴ.
þ <code class="directive"><a href="./mod/core.html#virtualhost"><VirtualHost></a></code> ּ
userid Ѵ.</p>
<p><strong> 丮:</strong><br />
<code class="module"><a href="./mod/mod_userdir.html">mod_userdir</a></code> û óѴٸ suEXEC
wrapper ȣϿ, û 丮 شϴ
ID CGI α Ѵ. Ϸ
ID CGI ְ ũƮ <a href="#model">
˻</a> ؾ Ѵ. <a href="#install">
ɼ</a> <code>--with-suexec-userdir</code> ϶.</p> </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
<div class="section">
<h2><a name="debug" id="debug">suEXEC ϱ</a></h2>
<p>suEXEC wrapper α ٷ
<code>--with-suexec-logfile</code> ɼ Ͽ
. wrapper ùٷ ϰ ġߴٸ ߸Ǿ
αϿ error_log .</p>
</div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div>
<div class="section">
<h2><a name="jabberwock" id="jabberwock">ٽ ѹ ϶: </a></h2>
<p><strong>!</strong> ִ.
ġ <a href="http://httpd.apache.org/docs/2.4/suexec.html">¶
</a> ֽ ϶.</p>
<p>wrapper ϴ ̷ο ִ.
suEXEC õ "" ϱ ̵ 캸 ٶ.</p>
<ul>
<li><strong>suEXEC </strong></li>
<li>
丮
<p class="indent">
Ȱ ȿ suEXEC û ȣƮ
ֻ document root Ȥ userdir û
ֻ document root ȿ ؾ Ѵ.
, ȣƮ װ ߴٸ ȣƮ
suEXEC ̿ϱ ȣƮ document root
ġ ۿ ʿ䰡 ִ.
( .)
</p>
</li>
<li>
suEXEC PATH ȯ溯
<p class="indent">
ϸ ִ. ϴ ΰ
<strong> ִ</strong> 丮 Ȯ϶.
װ ִ Ʈ̸ ϱ
̴.
</p>
</li>
<li>
suEXEC ڵ ϱ
<p class="indent">
ݺؼ , ϴ õѴٸ
<strong>ū </strong> ִ. 쿡
.
</p>
</li>
</ul>
</div></div>
<div class="bottomlang">
<p><span> : </span><a href="./en/suexec.html" hreflang="en" rel="alternate" title="English"> en </a> |
<a href="./fr/suexec.html" hreflang="fr" rel="alternate" title="Français"> fr </a> |
<a href="./ja/suexec.html" hreflang="ja" rel="alternate" title="Japanese"> ja </a> |
<a href="./ko/suexec.html" title="Korean"> ko </a> |
<a href="./tr/suexec.html" hreflang="tr" rel="alternate" title="Türkçe"> tr </a></p>
</div><div class="top"><a href="#page-header"><img src="./images/up.gif" alt="top" /></a></div><div class="section"><h2><a id="comments_section" name="comments_section">Comments</a></h2><div class="warning"><strong>Notice:</strong><br />This is not a Q&A section. Comments placed here should be pointed towards suggestions on improving the documentation or server, and may be removed again by our moderators if they are either implemented or considered invalid/off-topic. Questions on how to manage the Apache HTTP Server should be directed at either our IRC channel, #httpd, on Freenode, or sent to our <a href="http://httpd.apache.org/lists.html">mailing lists</a>.</div>
<script type="text/javascript"><!--//--><![CDATA[//><!--
var comments_shortname = 'httpd';
var comments_identifier = 'http://httpd.apache.org/docs/2.4/suexec.html';
(function(w, d) {
if (w.location.hostname.toLowerCase() == "httpd.apache.org") {
d.write('<div id="comments_thread"><\/div>');
var s = d.createElement('script');
s.type = 'text/javascript';
s.async = true;
s.src = 'https://comments.apache.org/show_comments.lua?site=' + comments_shortname + '&page=' + comments_identifier;
(d.getElementsByTagName('head')[0] || d.getElementsByTagName('body')[0]).appendChild(s);
}
else {
d.write('<div id="comments_thread">Comments are disabled for this page at the moment.<\/div>');
}
})(window, document);
//--><!]]></script></div><div id="footer">
<p class="apache">Copyright 2015 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>
<p class="menu"><a href="./mod/"></a> | <a href="./mod/directives.html">þ</a> | <a href="http://wiki.apache.org/httpd/FAQ">FAQ</a> | <a href="./glossary.html"></a> | <a href="./sitemap.html">Ʈ</a></p></div><script type="text/javascript"><!--//--><![CDATA[//><!--
if (typeof(prettyPrint) !== 'undefined') {
prettyPrint();
}
//--><!]]></script>
</body></html>
y~or5J ={Eeu磝Qk ᯘG{?+]ן?wM3X^歌>{7پK>on\jy R g/=fOroNVv~Y+ NGuÝHWyw[eQʨSb> >}Gmx[o[<{Ϯ_qF vM IENDB`