[Pkg-apache-commits] r1373 - in /trunk/apache2: changelog suexec.8

[sf at alioth.debian.org]

Author: sf
Date: Sat Dec  3 17:26:13 2011
New Revision: 1373

URL: http://svn.debian.org/wsvn/pkg-apache/?sc=1&rev=1373
Log:
Mention dpkg-statoverride for changing permissions of suexec

Modified:
    trunk/apache2/changelog
    trunk/apache2/suexec.8

Modified: trunk/apache2/changelog
URL: http://svn.debian.org/wsvn/pkg-apache/trunk/apache2/changelog?rev=1373&op=diff
==============================================================================
--- trunk/apache2/changelog (original)
+++ trunk/apache2/changelog Sat Dec  3 17:26:13 2011
@@ -3,6 +3,7 @@
   * Fix CVE-2011-4317: Prevent unintended pattern expansion in some
     reverse proxy configurations. (Similar to CVE-2011-3368, but different
     attack vector.)
+  * Mention dpkg-statoverride for changing permissions of suexec. LP: #897120
   * Fix broken link in docs. Closes: #650528
   * Remove Tollef Fog Heen, Thom May, and Peter Samuelson from uploaders.
     Thanks for your work in the past.

Modified: trunk/apache2/suexec.8
URL: http://svn.debian.org/wsvn/pkg-apache/trunk/apache2/suexec.8?rev=1373&op=diff
==============================================================================
--- trunk/apache2/suexec.8 (original)
+++ trunk/apache2/suexec.8 Sat Dec  3 17:26:13 2011
@@ -41,7 +41,8 @@
 If suexec is called by a user with name 'username', it will look into
 /etc/apache2/suexec/username for configuration. If the file does not exist,
 suexec will abort. By creating several config files, you can allow several
-different apache run users to use suexec.
+different apache run users to use suexec. You may need to change the
+permissions of /usr/lib/apache2/suexec with dpkg-statoverride.
 .PP
 The first line in the file is used as the document root (/var/www in the
 standard suexec) and the second line in the file is used as the suffix that is
@@ -64,4 +65,5 @@
 .BR /etc/apache2/suexec/www-data
 .SH SEE ALSO
 .BR apache2(8) ,
-.BR /usr/share/doc/apache2.2-common/README.Debian.gz
+.BR /usr/share/doc/apache2.2-common/README.Debian.gz ,
+.BR dpkg-statoverride(8)