![Norbert Lange](/assets/img/avatar_default.png)
Currently, we define the so-called "overflow group" as 'nogroup'. However, one practical issue is that systemd-sysusers will otherwise create a 'nobody' group with gid 999, because that's is what is usual to define the overflow group: users and groups are defined in LSB (Linux Standard Base): https://refspecs.linuxfoundation.org/LSB_5.0.0/LSB-Core-generic/LSB-Core-generic/usernames.html Quoting: "If the username exists on a system,then they should be in the suggested corresponding group". Only Debian and derivatives depart from this custom, naming it 'nogroup' (hence the rationale for commit908198e756
(system/skeleton: remove spurious group 'nobody'). See also commit9c67af2c52
(system/skeleton: use uid/gid 65534 for nobody/nogroup), and a related discussion on LWN.net (key is "overflow UID" which also applies to GID): https://lwn.net/Articles/695478/ Use the recommended groupname 'nobody'. Adapt packages accordingly. Signed-off-by: Norbert Lange <nolange79@gmail.com> [yann.morin.1998@free.fr: - reword commit log - extend commit log with more references (commits and LWN) ] Signed-off-by: Yann E. MORIN <yann.morin.1998@free.fr>
188 lines
7 KiB
Plaintext
188 lines
7 KiB
Plaintext
# Boa v0.94 configuration file
|
|
# File format has not changed from 0.93
|
|
# File format has changed little from 0.92
|
|
# version changes are noted in the comments
|
|
#
|
|
# The Boa configuration file is parsed with a lex/yacc or flex/bison
|
|
# generated parser. If it reports an error, the line number will be
|
|
# provided; it should be easy to spot. The syntax of each of these
|
|
# rules is very simple, and they can occur in any order. Where possible
|
|
# these directives mimic those of NCSA httpd 1.3; I saw no reason to
|
|
# introduce gratuitous differences.
|
|
|
|
# $Id: boa.conf,v 1.1 2004/10/09 02:48:37 andersen Exp $
|
|
|
|
# The "ServerRoot" is not in this configuration file. It can be compiled
|
|
# into the server (see defines.h) or specified on the command line with
|
|
# the -c option, for example:
|
|
#
|
|
# boa -c /usr/local/boa
|
|
|
|
|
|
# Port: The port Boa runs on. The default port for http servers is 80.
|
|
# If it is less than 1024, the server must be started as root.
|
|
|
|
Port 80
|
|
|
|
# Listen: the Internet address to bind(2) to. If you leave it out,
|
|
# it takes the behavior before 0.93.17.2, which is to bind to all
|
|
# addresses (INADDR_ANY). You only get one "Listen" directive,
|
|
# if you want service on multiple IP addresses, you have three choices:
|
|
# 1. Run boa without a "Listen" directive
|
|
# a. All addresses are treated the same; makes sense if the addresses
|
|
# are localhost, ppp, and eth0.
|
|
# b. Use the VirtualHost directive below to point requests to different
|
|
# files. Should be good for a very large number of addresses (web
|
|
# hosting clients).
|
|
# 2. Run one copy of boa per IP address, each has its own configuration
|
|
# with a "Listen" directive. No big deal up to a few tens of addresses.
|
|
# Nice separation between clients.
|
|
# The name you provide gets run through inet_aton(3), so you have to use dotted
|
|
# quad notation. This configuration is too important to trust some DNS.
|
|
|
|
#Listen 192.68.0.5
|
|
|
|
# User: The name or UID the server should run as.
|
|
# Group: The group name or GID the server should run as.
|
|
|
|
User nobody
|
|
Group nobody
|
|
|
|
# ServerAdmin: The email address where server problems should be sent.
|
|
# Note: this is not currently used, except as an environment variable
|
|
# for CGIs.
|
|
|
|
#ServerAdmin root@localhost
|
|
|
|
# ErrorLog: The location of the error log file. If this does not start
|
|
# with /, it is considered relative to the server root.
|
|
# Set to /dev/null if you don't want errors logged.
|
|
# If unset, defaults to /dev/stderr
|
|
|
|
ErrorLog /var/log/boa/error_log
|
|
# Please NOTE: Sending the logs to a pipe ('|'), as shown below,
|
|
# is somewhat experimental and might fail under heavy load.
|
|
# "Usual libc implementations of printf will stall the whole
|
|
# process if the receiving end of a pipe stops reading."
|
|
#ErrorLog "|/usr/sbin/cronolog --symlink=/var/log/boa/error_log /var/log/boa/error-%Y%m%d.log"
|
|
|
|
# AccessLog: The location of the access log file. If this does not
|
|
# start with /, it is considered relative to the server root.
|
|
# Comment out or set to /dev/null (less effective) to disable
|
|
# Access logging.
|
|
|
|
AccessLog /var/log/boa/access_log
|
|
# Please NOTE: Sending the logs to a pipe ('|'), as shown below,
|
|
# is somewhat experimental and might fail under heavy load.
|
|
# "Usual libc implementations of printf will stall the whole
|
|
# process if the receiving end of a pipe stops reading."
|
|
#AccessLog "|/usr/sbin/cronolog --symlink=/var/log/boa/access_log /var/log/boa/access-%Y%m%d.log"
|
|
|
|
# UseLocaltime: Logical switch. Uncomment to use localtime
|
|
# instead of UTC time
|
|
#UseLocaltime
|
|
|
|
# VerboseCGILogs: this is just a logical switch.
|
|
# It simply notes the start and stop times of cgis in the error log
|
|
# Comment out to disable.
|
|
|
|
#VerboseCGILogs
|
|
|
|
# ServerName: the name of this server that should be sent back to
|
|
# clients if different than that returned by gethostname + gethostbyname
|
|
|
|
#ServerName www.your.org.here
|
|
|
|
# VirtualHost: a logical switch.
|
|
# Comment out to disable.
|
|
# Given DocumentRoot /var/www, requests on interface 'A' or IP 'IP-A'
|
|
# become /var/www/IP-A.
|
|
# Example: http://localhost/ becomes /var/www/127.0.0.1
|
|
#
|
|
# Not used until version 0.93.17.2. This "feature" also breaks commonlog
|
|
# output rules, it prepends the interface number to each access_log line.
|
|
# You are expected to fix that problem with a postprocessing script.
|
|
|
|
#VirtualHost
|
|
|
|
# DocumentRoot: The root directory of the HTML documents.
|
|
# Comment out to disable server non user files.
|
|
|
|
DocumentRoot /var/www
|
|
|
|
# UserDir: The name of the directory which is appended onto a user's home
|
|
# directory if a ~user request is recieved.
|
|
|
|
UserDir public_html
|
|
|
|
# DirectoryIndex: Name of the file to use as a pre-written HTML
|
|
# directory index. Please MAKE AND USE THESE FILES. On the
|
|
# fly creation of directory indexes can be _slow_.
|
|
# Comment out to always use DirectoryMaker
|
|
|
|
DirectoryIndex index.html
|
|
|
|
# DirectoryMaker: Name of program used to create a directory listing.
|
|
# Comment out to disable directory listings. If both this and
|
|
# DirectoryIndex are commented out, accessing a directory will give
|
|
# an error (though accessing files in the directory are still ok).
|
|
|
|
DirectoryMaker /usr/lib/boa/boa_indexer
|
|
|
|
# DirectoryCache: If DirectoryIndex doesn't exist, and DirectoryMaker
|
|
# has been commented out, the the on-the-fly indexing of Boa can be used
|
|
# to generate indexes of directories. Be warned that the output is
|
|
# extremely minimal and can cause delays when slow disks are used.
|
|
# Note: The DirectoryCache must be writable by the same user/group that
|
|
# Boa runs as.
|
|
|
|
# DirectoryCache /var/spool/boa/dircache
|
|
|
|
# KeepAliveMax: Number of KeepAlive requests to allow per connection
|
|
# Comment out, or set to 0 to disable keepalive processing
|
|
|
|
KeepAliveMax 1000
|
|
|
|
# KeepAliveTimeout: seconds to wait before keepalive connection times out
|
|
|
|
KeepAliveTimeout 10
|
|
|
|
# MimeTypes: This is the file that is used to generate mime type pairs
|
|
# and Content-Type fields for boa.
|
|
# Set to /dev/null if you do not want to load a mime types file.
|
|
# Do *not* comment out (better use AddType!)
|
|
|
|
MimeTypes /etc/mime.types
|
|
|
|
# DefaultType: MIME type used if the file extension is unknown, or there
|
|
# is no file extension.
|
|
|
|
DefaultType text/plain
|
|
|
|
# AddType: adds types without editing mime.types
|
|
# Example: AddType type extension [extension ...]
|
|
|
|
# Uncomment the next line if you want .cgi files to execute from anywhere
|
|
#AddType application/x-httpd-cgi cgi
|
|
|
|
# Redirect, Alias, and ScriptAlias all have the same semantics -- they
|
|
# match the beginning of a request and take appropriate action. Use
|
|
# Redirect for other servers, Alias for the same server, and ScriptAlias
|
|
# to enable directories for script execution.
|
|
|
|
# Redirect allows you to tell clients about documents which used to exist in
|
|
# your server's namespace, but do not anymore. This allows you to tell the
|
|
# clients where to look for the relocated document.
|
|
# Example: Redirect /bar http://elsewhere/feh/bar
|
|
|
|
# Aliases: Aliases one path to another.
|
|
# Example: Alias /path1/bar /path2/foo
|
|
|
|
# Alias /doc /usr/doc
|
|
|
|
# ScriptAlias: Maps a virtual path to a directory for serving scripts
|
|
# Example: ScriptAlias /htbin/ /www/htbin/
|
|
|
|
ScriptAlias /cgi-bin/ /usr/lib/cgi-bin/
|
|
|