diff options
| author | Gabriel Hurley <gabehr@gmail.com> | 2010-10-19 00:58:34 +0000 |
|---|---|---|
| committer | Gabriel Hurley <gabehr@gmail.com> | 2010-10-19 00:58:34 +0000 |
| commit | da17c2b84fda02aa1f1615f04e6d681cea9adcb4 (patch) | |
| tree | 1f9f1722be5019b138f4f9d5f80bf7e67840721d | |
| parent | 4ec58f702b3f6268d011e1942266af9d7ba664fa (diff) | |
[1.2.X] Fixed #7616 -- Added advice on unix socket permissions and umasks to fastcgi deployment documentation. Thanks to Malcolm Tredinnick for the report and advice, and PaulM and cramm for reviewing the patch.
Backport of [14276] from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@14277 bcc190cf-cafb-0310-a4f2-bffc1f526a37
| -rw-r--r-- | docs/howto/deployment/fastcgi.txt | 8 |
1 files changed, 8 insertions, 0 deletions
diff --git a/docs/howto/deployment/fastcgi.txt b/docs/howto/deployment/fastcgi.txt index a445a2d1a7..3bf231fb19 100644 --- a/docs/howto/deployment/fastcgi.txt +++ b/docs/howto/deployment/fastcgi.txt @@ -111,6 +111,14 @@ Running a threaded server on a TCP port:: Running a preforked server on a Unix domain socket:: ./manage.py runfcgi method=prefork socket=/home/user/mysite.sock pidfile=django.pid + +.. admonition:: Socket security + + Django's default umask requires that the webserver and the Django fastcgi + process be run with the same group **and** user. For increased security, + you can run them under the same group but as different users. If you do + this, you will need to set the umask to 0002 using the ``umask`` argument + to ``runfcgi``. Run without daemonizing (backgrounding) the process (good for debugging):: |