comparison xml/en/docs/http/ngx_http_core_module.xml @ 418:2638f67205ee

Documented the disable_symlinks directive.
author Ruslan Ermilov <ru@nginx.com>
date Wed, 15 Feb 2012 21:45:42 +0000
parents 98dac2bd7598
children 8fa5f2273014
comparison
equal deleted inserted replaced
417:cbc2d1b51cb6 418:2638f67205ee
457 <para> 457 <para>
458 Sets an alignment for 458 Sets an alignment for
459 <link id="directio"/>. 459 <link id="directio"/>.
460 In most cases, a 512-byte alignment is enough, however, when 460 In most cases, a 512-byte alignment is enough, however, when
461 using XFS under Linux, it needs to be increased to 4K. 461 using XFS under Linux, it needs to be increased to 4K.
462 </para>
463
464 </directive>
465
466
467 <directive name="disable_symlinks">
468 <syntax>
469 <literal>on</literal> |
470 <literal>off</literal> |
471 <literal>if_not_owner</literal></syntax>
472 <default>off</default>
473 <context>http</context>
474 <context>server</context>
475 <context>location</context>
476 <appeared-in>1.1.15</appeared-in>
477
478 <para>
479 Determines how nginx treats symbolic links when opening files:
480 <list type="tag">
481
482 <tag-name><literal>off</literal></tag-name>
483 <tag-desc>
484 Symbolic links in the pathname are not processed specially.
485 This is the default behavior.
486 </tag-desc>
487
488 <tag-name><literal>on</literal></tag-name>
489 <tag-desc>
490 If any component of the pathname is a symbolic link,
491 access to a file is denied.
492 </tag-desc>
493
494 <tag-name><literal>if_not_owner</literal></tag-name>
495 <tag-desc>
496 Access to a file is denied if any component of the pathname
497 is a symbolic link, and the link and object that the link
498 points to have different owners.
499 </tag-desc>
500
501 </list>
502 </para>
503
504 <para>
505 This directive is only available on systems that have the
506 <c-func>openat</c-func> and <c-func>fstatat</c-func> interfaces.
507 This includes modern versions of FreeBSD, Linux, and Solaris.
508 </para>
509
510 <para>
511 Parameters <literal>on</literal> and <literal>if_not_owner</literal>
512 add a processing overhead.
462 </para> 513 </para>
463 514
464 </directive> 515 </directive>
465 516
466 517