Commit da17c2b8 authored by Gabriel Hurley's avatar Gabriel Hurley
Browse files

[1.2.X] Fixed #7616 -- Added advice on unix socket permissions and umasks to...

[1.2.X] Fixed #7616 -- Added advice on unix socket permissions and umasks to fastcgi deployment documentation. Thanks to Malcolm Tredinnick for the report and advice, and PaulM and cramm for reviewing the patch.

Backport of [14276] from trunk.

git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@14277 bcc190cf-cafb-0310-a4f2-bffc1f526a37
parent 4ec58f70
Loading
Loading
Loading
Loading
+8 −0
Original line number Diff line number Diff line
@@ -112,6 +112,14 @@ Running a preforked server on a Unix domain socket::

    ./manage.py runfcgi method=prefork socket=/home/user/mysite.sock pidfile=django.pid
    
.. admonition:: Socket security

    Django's default umask requires that the webserver and the Django fastcgi
    process be run with the same group **and** user. For increased security,
    you can run them under the same group but as different users. If you do
    this, you will need to set the umask to 0002 using the ``umask`` argument
    to ``runfcgi``.

Run without daemonizing (backgrounding) the process (good for debugging)::

    ./manage.py runfcgi daemonize=false socket=/tmp/mysite.sock maxrequests=1