ASF Bugzilla – Attachment 19115 Details for
Bug 40950
add note to manpage that htpasswd/htdigest is not safe for setuid/sudo
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Help
|
New Account
|
Log In
Remember
[x]
|
Forgot Password
Login:
[x]
[patch]
adjust xml text
40950.patch (text/plain), 1.05 KB, created by
Thijs Kinkhorst
on 2006-11-12 04:12:06 UTC
(
hide
)
Description:
adjust xml text
Filename:
MIME Type:
Creator:
Thijs Kinkhorst
Created:
2006-11-12 04:12:06 UTC
Size:
1.05 KB
patch
obsolete
>Index: docs/manual/programs/htpasswd.xml >=================================================================== >--- docs/manual/programs/htpasswd.xml (revision 473940) >+++ docs/manual/programs/htpasswd.xml (working copy) >@@ -188,6 +188,9 @@ > <em>not</em> be within the Web server's URI space -- that is, they should > not be fetchable with a browser.</p> > >+ <p>This program is not safe as a setuid executable. Do <em>not</em> make it >+ setuid.</p> >+ > <p>The use of the <code>-b</code> option is discouraged, since when it is > used the unencrypted password appears on the command line.</p> > </section> >Index: docs/manual/programs/htdigest.xml >=================================================================== >--- docs/manual/programs/htdigest.xml (revision 473940) >+++ docs/manual/programs/htdigest.xml (working copy) >@@ -66,4 +66,9 @@ > </dl> > </section> > >+<section id="security"><title>Security Considerations</title> >+ <p>This program is not safe as a setuid executable. Do <em>not</em> make it >+ setuid.</p> >+</section> >+ > </manualpage>
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Diff
View Attachment As Raw
Actions:
View
|
Diff
Attachments on
bug 40950
: 19115