Sun Microsystems Netscape Enterprise Server, Руководство администратора

Страница: 179 / 532

Chapter 7, Configuring Server Preferences 179
Restricting Symbolic Links (Unix)
Restricting Symbolic Links (Unix)
You can limit the use of the filesystem links in your server. Filesystem links are
references to files stored in other directories or filesystems. The reference
makes the remote file as accessible as if it were in the current directory. There
are two types of filesystem links:
• Hard links —A hard link is really two filenames that point to the same set
of data blocks; the original file and the link are identical. For this reason,
hard links cannot be on different filesystems.
• Symbolic (soft) links —A symbolic link consists of two files, an original
file that contains the data, and another that points to the original file.
Symbolic links are more flexible than hard links. Symbolic links can be used
across different filesystems and can be linked to directories.
For more information about hard and symbolic links, see your Unix system
documentation.
Filesystem links are an easy way to create pointers to documents outside of the
primary document directory and anyone can create these links. For this reason
you might be concerned that people might create pointers to sensitive files (for
example, confidential documents or system password files).
To restrict symbolic links, use the Limit Symbolic Link page in the Server
Manager.
Using the Watchdog (uxwdog) Process (Unix)
The
uxwdog
process is the name of the web server watchdog process,
introduced in Enterprise Server 3.01. Prior to Enterprise Server 3.01, the server
would fork a copy of itself at startup, and the parent server process would
serve as the watchdog for the child. In Enterprise 2.x, a server restart operation
would cause the parent server process (
ns-httpd
) to terminate the child
ns-
httpd
process, and then recreate it. This result had the advantage that the
parent process could maintain the key file password for a secure server, so that
restarting the server would not require the server administrator to reenter the
password.