svn commit: r48998 - head/en_US.ISO8859-1/books/porters-handbook/special

[Mathieu Arnold]

Author: mat
Date: Fri Jun 24 10:44:38 2016
New Revision: 48998
URL: https://svnweb.freebsd.org/changeset/doc/48998

Log:
  Add a warning about the usage of WWWOWN and WWWGRP.
  
  Reviewed by:	wblock
  Sponsored by:	Absolight
  Differential Revision:	https://reviews.freebsd.org/D6932

Modified:
  head/en_US.ISO8859-1/books/porters-handbook/special/chapter.xml

Modified: head/en_US.ISO8859-1/books/porters-handbook/special/chapter.xml
==============================================================================
--- head/en_US.ISO8859-1/books/porters-handbook/special/chapter.xml	Fri Jun 24 00:08:15 2016	(r48997)
+++ head/en_US.ISO8859-1/books/porters-handbook/special/chapter.xml	Fri Jun 24 10:44:38 2016	(r48998)
@@ -3423,6 +3423,13 @@ do-install:
 	  mygroup</literal> if the port needs different values.  This
 	allows the user to override them easily.</para>
 
+      <important>
+	<para>Use <varname>WWWOWN</varname> and
+	  <varname>WWWGRP</varname>, with parsimony, and remember that
+	  every file the web server can write to is a security risk
+	  waiting to happen.</para>
+      </important>
+
       <para>Do not depend on Apache unless the web app explicitly
 	needs Apache.  Respect that users may wish to run a web
 	app on different web server than Apache.</para>