HP Webwise MPE/iX secure web server tutorial - September 2000

September 14, 2000
Page 77
hp e3000
webwise
secure web
server
runtime differences compared to
apache
• umask 007 specified in JHTTPDS
• better default security (no world read/write)
• existing Apache CGIs may be expecting umask 000
• different parent/child userids (MPELX51)
• JHTTPDS parent runs under MGR.APACHE
– Specified on !JOB statement
• spawned children run under SECURE.APACHE
– Specified by User directive in httpd.conf
– Helps prevent CGIs from being malicious
• Apache for MPE/iX runs everything under
WWW.APACHE