MPE/iX Webwise secure web server - porting case study

February 9, 2001
Solution Symposium
Page 10
hp e3000
webwise
porting
apache run issues - processes
• parent and children must be able to use different POSIX
uids to ensure server keys and certificates are secure
• children now unconditionally call setuid() instead of
requiring MANAGER.SYS as in the original Apache port
• parent must be able to signal children w/different uid
• patch MPELX51 allows AM parents to do this
• parent and children must be able to manipulate common
SVIPC shared memory from different uids
• on Unix, a superuser (uid 0) parent could do this,
but since MPE lacks the concept of uid 0, SHM_R
and SHM_W must be redefined to allow group
access