Communicator e3000 MPE/iX Release 7.0 Express 1 (Software Release C.70.01) (30216-90328)

Chapter 3 55
New Networking
Apache 1.3.14 for MPE/iX
File Creation Mask
A file creation mask, umask 007, is set in the start-up stream job, JHTTPD, for increased
security. With this change, files created by Apache cannot be accessed by anyone outside of
the APACHE account. Files in this category are log files, files created in the proxy
directory, /APACHE (when Apache is used as a proxy server) and any files created by CGI
scripts.
Apache 1.3.14 Base Features
An overview of the new Apache 1.3.14 base features is described in the online Apache
newsletter, Apacheweek, at http://www.apacheweek.com/issues/00-10-13. The Apache
1.3.14 base provides a few new features and bug fixes.
A new feature in Apache 1.3.14 is additional media types in the mime.types file. Media
types are configured for WAP so that wireless documents and applications can be handled
by Apache.
Security Fixes
There are several important fixes for security vulnerabilities that were discovered in
mod_vhost_alias and mod_rewrite. These vulnerabilities are exposed under certain
situations that are described in the Apacheweek article,
http://www.apacheweek.com/issues/00-10-13
New Installation Scheme
With this release begins a new installation scheme for Apache. This scheme allows for
easier migration to new Apache releases.
In previous Apache for MPE/iX releases, Apache was always installed in the same location,
PUB.APACHE. This was inconvenient when rolling to new versions. The new Apache
installation strategy will provide the following advantages:
• easy return to an earlier version of Apache
• ability to have multiple versions of Apache installed for evaluation, testing, and
migration
• user-customized data is kept segregated in the PUB group away from official files
New Installation Implementation
Starting with Apache 1.3.14 for MPE/iX, new releases will reside in their own
version-specific group under the APACHE account. A version-specific group corresponds to
Apache's MPE version number. Symbolic links point to the new version-specific files.
• The APACHE account and PUB group is still used but is used only for customer files
and Apache files that must be customized. For example, /APACHE/PUB should contain
user documents under htdocs, a customized JHTTPD, log files and customized
configuration files in conf/. Users should modify or add files below the PUB group and
never below the version-specific group.
• A new version-specific group is created for each new release. All release files are
extracted into this group. For example, Apache 1.3.14 has MPE version number A.02.00