| 36 |
<a href="http://www.sun.com/bigadmin/features/articles/least_privilege.jsp" |
<a href="http://www.sun.com/bigadmin/features/articles/least_privilege.jsp" |
| 37 |
>Solaris Privileges</a>. In particular, it offers a solution to the |
>Solaris Privileges</a>. In particular, it offers a solution to the |
| 38 |
problem of privilege separation between different Virtual Hosts, first |
problem of privilege separation between different Virtual Hosts, first |
| 39 |
promised by the abandoned <module>perchild</module> MPM. |
promised by the abandoned perchild MPM. It also offers other security |
| 40 |
It also offers other security enhancements.</p> |
enhancements.</p> |
| 41 |
|
|
| 42 |
<p>Unlike <module>perchild</module>, <module>mod_privileges</module> |
<p>Unlike perchild, <module>mod_privileges</module> |
| 43 |
is not itself an MPM. It works <em>within</em> a processing model to |
is not itself an MPM. It works <em>within</em> a processing model to |
| 44 |
set privileges and User/Group <em>per request</em> in a running process. |
set privileges and User/Group <em>per request</em> in a running process. |
| 45 |
It is therefore not compatible with a threaded MPM, and will refuse |
It is therefore not compatible with a threaded MPM, and will refuse |