Commit 556bf44e authored by Ruediger Pluem's avatar Ruediger Pluem
Browse files

* Update transformation 


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@686855 13f79535-47bb-0310-9956-ffa450edef68
parent 91f6a4a4

docs/manual/content-negotiation.html.ja.utf8

+0 −2
Changes for docs/manual/content-negotiation.html.ja.utf8: 0 added lines, 2 removed lines.
Original line number Diff line number Diff line
@@ -24,8 +24,6 @@ 
<a href="./ko/content-negotiation.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |

<a href="./tr/content-negotiation.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>

</div>

<div class="outofdate">この日本語訳はすでに古くなっている可能性があります。

          更新された内容を見るには英語版をご覧下さい。</div>





    <p>Apache は HTTP/1.1 の規格に記述されているコンテントネゴシエーションを

docs/manual/misc/security_tips.html.en

+29 −25
Changes for docs/manual/misc/security_tips.html.en: 29 added lines, 25 removed lines.
Original line number Diff line number Diff line
@@ -19,7 +19,8 @@ 
<a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.3</a> &gt; <a href="./">Miscellaneous Documentation</a></div><div id="page-content"><div id="preamble"><h1>Security Tips</h1>

<div class="toplang">

<p><span>Available Languages: </span><a href="../en/misc/security_tips.html" title="English">&nbsp;en&nbsp;</a> |

<a href="../ko/misc/security_tips.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a></p>

<a href="../ko/misc/security_tips.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |

<a href="../tr/misc/security_tips.html" hreflang="tr" rel="alternate" title="Trke">&nbsp;tr&nbsp;</a></p>

</div>



    <p>Some hints and tips on security issues in setting up a web server.
@@ -146,8 +147,8 @@ 
    protected from modification by non-root users. Not only must the files

    themselves be writeable only by root, but so must the directories, and

    parents of all directories. For example, if you choose to place

    ServerRoot in  /usr/local/apache then it is suggested that you create 

    that directory as root, with commands like these:</p>

    ServerRoot in  <code>/usr/local/apache</code> then it is suggested that

    you create that directory as root, with commands like these:</p>



    <div class="example"><p><code>

      mkdir /usr/local/apache <br />
@@ -158,9 +159,10 @@ 
      chmod 755 . bin conf logs

    </code></p></div>



    <p>It is assumed that /, /usr, and /usr/local are only modifiable by 

    root. When you install the <code class="program"><a href="../programs/httpd.html">httpd</a></code> executable, you

    should ensure that it is similarly protected:</p>

    <p>It is assumed that <code>/</code>, <code>/usr</code>, and

    <code>/usr/local</code> are only modifiable by root. When you install the

    <code class="program"><a href="../programs/httpd.html">httpd</a></code> executable, you should ensure that it is

    similarly protected:</p>



    <div class="example"><p><code>

      cp httpd /usr/local/apache/bin <br />
@@ -199,9 +201,10 @@ 
    significant.</p>



    <p>SSI files also pose the same risks that are associated with CGI

    scripts in general. Using the "exec cmd" element, SSI-enabled files 

    can execute any CGI script or program under the permissions of the 

    user and group Apache runs as, as configured in httpd.conf.</p>

    scripts in general. Using the <code>exec cmd</code> element, SSI-enabled

    files can execute any CGI script or program under the permissions of the

    user and group Apache runs as, as configured in

    <code>httpd.conf</code>.</p>



    <p>There are ways to enhance the security of SSI files while still

    taking advantage of the benefits they provide.</p>
@@ -210,17 +213,17 @@ 
    administrator can enable <a href="../suexec.html">suexec</a> as

    described in the <a href="#cgi">CGI in General</a> section.</p>



    <p>Enabling SSI for files with .html or .htm extensions can be 

    dangerous. This is especially true in a shared, or high traffic, 

    server environment. SSI-enabled files should have a separate extension,

    such as the conventional .shtml. This helps keep server load at a 

    minimum and allows for easier management of risk.</p>

    <p>Enabling SSI for files with <code>.html</code> or <code>.htm</code>

    extensions can be dangerous. This is especially true in a shared, or high

    traffic, server environment. SSI-enabled files should have a separate

    extension, such as the conventional <code>.shtml</code>. This helps keep

    server load at a minimum and allows for easier management of risk.</p>



    <p>Another solution is to disable the ability to run scripts and

    programs from SSI pages. To do this replace <code>Includes</code>

    with <code>IncludesNOEXEC</code> in the <code class="directive"><a href="../mod/core.html#options">Options</a></code> directive.  Note that users may

    still use &lt;--#include virtual="..." --&gt; to execute CGI scripts if 

    these scripts are in directories designated by a <code class="directive"><a href="../mod/mod_alias.html#scriptalias">ScriptAlias</a></code> directive.</p>

    still use <code>&lt;--#include virtual="..." --&gt;</code> to execute CGI

    scripts if these scripts are in directories designated by a <code class="directive"><a href="../mod/mod_alias.html#scriptalias">ScriptAlias</a></code> directive.</p>



  </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>

<div class="section">
@@ -282,12 +285,12 @@ 


  



  <p>

  Embedded scripting options which run as part of the server itself,

  such as mod_php, mod_perl, mod_tcl, and mod_python, run under the

  identity of the server itself (see the <code class="directive"><a href="../mod/mpm_common.html#user">User</a></code> directive), and therefore

  scripts executed by these engines potentially can access anything the

  server user can. Some scripting engines may provide restrictions, but

  <p>Embedded scripting options which run as part of the server itself,

  such as <code>mod_php</code>, <code>mod_perl</code>, <code>mod_tcl</code>,

  and <code>mod_python</code>, run under the identity of the server itself

  (see the <code class="directive"><a href="../mod/mpm_common.html#user">User</a></code> directive), and

  therefore scripts executed by these engines potentially can access anything

  the server user can. Some scripting engines may provide restrictions, but

  it is better to be safe and assume not.</p>



  </div><div class="top"><a href="#page-header"><img alt="top" src="../images/up.gif" /></a></div>
@@ -360,8 +363,8 @@ 
    &lt;Location /&gt;</code> directive might overturn it.</p>



    <p>Also be wary of playing games with the <code class="directive"><a href="../mod/mod_userdir.html#userdir">UserDir</a></code> directive; setting it to

    something like "./" would have the same effect, for root, as the first 

    example above. If you are using Apache 1.3 or above, we strongly 

    something like <code>./</code> would have the same effect, for root, as

    the first example above. If you are using Apache 1.3 or above, we strongly

    recommend that you include the following line in your server

    configuration files:</p>
@@ -420,7 +423,8 @@ 
  </div></div>

<div class="bottomlang">

<p><span>Available Languages: </span><a href="../en/misc/security_tips.html" title="English">&nbsp;en&nbsp;</a> |

<a href="../ko/misc/security_tips.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a></p>

<a href="../ko/misc/security_tips.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |

<a href="../tr/misc/security_tips.html" hreflang="tr" rel="alternate" title="Trke">&nbsp;tr&nbsp;</a></p>

</div><div id="footer">

<p class="apache">Copyright 2008 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>

<p class="menu"><a href="../mod/">Modules</a> | <a href="../mod/directives.html">Directives</a> | <a href="../faq/">FAQ</a> | <a href="../glossary.html">Glossary</a> | <a href="../sitemap.html">Sitemap</a></p></div>

docs/manual/misc/security_tips.html.ko.euc-kr

+4 −2
Changes for docs/manual/misc/security_tips.html.ko.euc-kr: 4 added lines, 2 removed lines.
Original line number Diff line number Diff line
@@ -19,7 +19,8 @@ 
<a href="http://www.apache.org/">Apache</a> &gt; <a href="http://httpd.apache.org/">HTTP Server</a> &gt; <a href="http://httpd.apache.org/docs/">Documentation</a> &gt; <a href="../">Version 2.3</a> &gt; <a href="./">Miscellaneous Documentation</a></div><div id="page-content"><div id="preamble"><h1>보안 팁</h1>

<div class="toplang">

<p><span>가능한 언어: </span><a href="../en/misc/security_tips.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |

<a href="../ko/misc/security_tips.html" title="Korean">&nbsp;ko&nbsp;</a></p>

<a href="../ko/misc/security_tips.html" title="Korean">&nbsp;ko&nbsp;</a> |

<a href="../tr/misc/security_tips.html" hreflang="tr" rel="alternate" title="T&#252;rk&#231;e">&nbsp;tr&nbsp;</a></p>

</div>

<div class="outofdate">이 문서는 최신판 번역이 아닙니다.

            최근에 변경된 내용은 영어 문서를 참고하세요.</div>
@@ -336,7 +337,8 @@ 
  </div></div>

<div class="bottomlang">

<p><span>가능한 언어: </span><a href="../en/misc/security_tips.html" hreflang="en" rel="alternate" title="English">&nbsp;en&nbsp;</a> |

<a href="../ko/misc/security_tips.html" title="Korean">&nbsp;ko&nbsp;</a></p>

<a href="../ko/misc/security_tips.html" title="Korean">&nbsp;ko&nbsp;</a> |

<a href="../tr/misc/security_tips.html" hreflang="tr" rel="alternate" title="T&#252;rk&#231;e">&nbsp;tr&nbsp;</a></p>

</div><div id="footer">

<p class="apache">Copyright 2008 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p>

<p class="menu"><a href="../mod/">모듈</a> | <a href="../mod/directives.html">지시어들</a> | <a href="../faq/">FAQ</a> | <a href="../glossary.html">용어</a> | <a href="../sitemap.html">사이트맵</a></p></div>

docs/manual/mod/mod_log_config.html.ja.utf8

+22 −17
Changes for docs/manual/mod/mod_log_config.html.ja.utf8: 22 added lines, 17 removed lines.
Original line number Diff line number Diff line
@@ -27,8 +27,6 @@ 
<a href="../ko/mod/mod_log_config.html" hreflang="ko" rel="alternate" title="Korean">&nbsp;ko&nbsp;</a> |

<a href="../tr/mod/mod_log_config.html" hreflang="tr" rel="alternate" title="Türkçe">&nbsp;tr&nbsp;</a></p>

</div>

<div class="outofdate">この日本語訳はすでに古くなっている可能性があります。

          更新された内容を見るには英語版をご覧下さい。</div>

<table class="module"><tr><th><a href="module-dict.html#Description">説明:</a></th><td>サーバへのリクエストのロギング</td></tr>

<tr><th><a href="module-dict.html#Status">ステータス:</a></th><td>Base</td></tr>

<tr><th><a href="module-dict.html#ModuleIdentifier">モジュール識別子:</a></th><td>log_config_module</td></tr>
@@ -130,43 +128,50 @@ 
        <td>応答の <code><var>Foobar</var>:</code> ヘッダの内容</td></tr>

<tr><td><code>%p</code></td>

        <td>リクエストを扱っているサーバの正式なポート</td></tr>

<tr class="odd"><td><code>%P</code></td>

<tr class="odd"><td><code>%{<var>format</var>}p</code></td>

        <td>サーバがリクエストを処理しているポートの公式

        <span class="transnote">(<em>訳注:</em> canonical)</span> のポート番号か、

        サーバの実際のポート番号か、クライアント側の実際のポート番号かです。

        format に使える文字列は <code>canonical</code>, <code>local</code>,

        <code>remote</code> になります。

        </td></tr>

<tr><td><code>%P</code></td>

        <td>リクエストを扱った子プロセスのプロセス ID</td></tr>

<tr><td><code>%{<var>format</var>}P</code></td>

<tr class="odd"><td><code>%{<var>format</var>}P</code></td>

        <td>リクエストを扱ったワーカーのプロセス ID かスレッド ID。

        <var>format</var> として有効な値は <code>pid</code>, <code>tid</code>,

        <code>hextid</code> です。<code>hextid</code> を使うには

        APR 1.2.0 以降が必要です。

        </td></tr>

<tr class="odd"><td><code>%q</code></td>

<tr><td><code>%q</code></td>

        <td>問い合せ文字列 (存在する場合は前に <code>?</code> が追加される。

        そうでない場合は空文字列)</td></tr>

<tr><td><code>%r</code></td>

<tr class="odd"><td><code>%r</code></td>

        <td>リクエストの最初の行</td></tr>

<tr class="odd"><td><code>%s</code></td>

<tr><td><code>%s</code></td>

        <td>ステータス。内部でリダイレクトされたリクエストは、元々の

         リクエストのステータス --- 最後のステータスは <code>%&gt;s</code>

    </td></tr>

<tr><td><code>%t</code></td>

<tr class="odd"><td><code>%t</code></td>

        <td>リクエストを受付けた時刻。

        CLF の時刻の書式 (標準の英語の書式)</td></tr>

<tr class="odd"><td><code>%{<var>format</var>}t</code></td>

<tr><td><code>%{<var>format</var>}t</code></td>

        <td><var>format</var> で与えられた書式による時刻。format は

         <code>strftime (3)</code> の

         書式である必要がある。(地域化されている可能性がある)</td></tr>

<tr><td><code>%T</code></td>

<tr class="odd"><td><code>%T</code></td>

        <td>リクエストを扱うのにかかった時間、秒単位</td></tr>

<tr class="odd"><td><code>%u</code></td>

<tr><td><code>%u</code></td>

        <td>リモートユーザ (認証によるもの。ステータス (<code>%s</code>) が

        401 のときは意味がないものである可能性がある)

    </td></tr>

<tr><td><code>%U</code></td>

<tr class="odd"><td><code>%U</code></td>

        <td>リクエストされた URL パス。クエリ文字列は含まない</td></tr>

<tr class="odd"><td><code>%v</code></td>

<tr><td><code>%v</code></td>

        <td>リクエストを扱っているサーバの正式な <code class="directive"><a href="../mod/core.html#servername">ServerName</a></code></td></tr>

<tr><td><code>%V</code></td>

<tr class="odd"><td><code>%V</code></td>

        <td><code class="directive"><a href="../mod/core.html#usecanonicalname">UseCanonicalName</a></code> の設定によるサーバ名</td></tr>

<tr class="odd"><td><code>%X</code></td>

<tr><td><code>%X</code></td>

        <td>応答が完了したときの接続ステータス:



        <table>
@@ -184,11 +189,11 @@ 
        いましたが、これは歴史的に ssl が使用している

        <code>%{<var>var</var>}c</code>

        構文と衝突していました。)</p></td></tr>

<tr><td><code>%I</code></td>

<tr class="odd"><td><code>%I</code></td>

        <td>リクエストとヘッダを含む、受け取ったバイト数。

        0 にはならない。

        これを使用するためには <code class="module"><a href="../mod/mod_logio.html">mod_logio</a></code> が必要</td></tr>

<tr class="odd"><td><code>%O</code></td>

<tr><td><code>%O</code></td>

        <td>ヘッダを含む、送信したバイト数。0 にはならない。

        これを使用するためには <code class="module"><a href="../mod/mod_logio.html">mod_logio</a></code> が必要</td></tr>

</table>

docs/manual/mod/mod_proxy.html.en

+5 −4
Changes for docs/manual/mod/mod_proxy.html.en: 5 added lines, 4 removed lines.
Original line number Diff line number Diff line
@@ -942,7 +942,7 @@ through</td></tr> 
        clears the in-error flag.

    </td></tr>

    <tr><td>timeout</td>

        <td><code class="directive">ProxyTimeout</code></td>

        <td><code class="directive"><a href="#proxytimeout">ProxyTimeout</a></code></td>

        <td>Connection timeout in seconds.

        The number of seconds Apache waits for data sent by / to the backend.

    </td></tr>
@@ -970,8 +970,9 @@ through</td></tr> 
        <td>byrequests</td>

        <td>Balancer load-balance method. Select the load-balancing scheduler

        method to use. Either <code>byrequests</code>, to perform weighted

        request counting or <code>bytraffic</code>, to perform weighted

        traffic byte count balancing. Default is <code>byrequests</code>.

        request counting, <code>bytraffic</code>, to perform weighted

        traffic byte count balancing, or <code>bybusyness</code>, to perform 

        pending request balancing. Default is <code>byrequests</code>.

    </td></tr>

    <tr><td>maxattempts</td>

        <td>1</td>
@@ -1423,7 +1424,7 @@ expressions</td></tr> 
<table class="directive">

<tr><th><a href="directive-dict.html#Description">Description:</a></th><td>Network timeout for proxied requests</td></tr>

<tr><th><a href="directive-dict.html#Syntax">Syntax:</a></th><td><code>ProxyTimeout <var>seconds</var></code></td></tr>

<tr><th><a href="directive-dict.html#Default">Default:</a></th><td><code>ProxyTimeout 300</code></td></tr>

<tr><th><a href="directive-dict.html#Default">Default:</a></th><td><code>Value of <code class="directive"><a href="../mod/core.html#timeout">Timeout</a></code></code></td></tr>

<tr><th><a href="directive-dict.html#Context">Context:</a></th><td>server config, virtual host</td></tr>

<tr><th><a href="directive-dict.html#Status">Status:</a></th><td>Extension</td></tr>

<tr><th><a href="directive-dict.html#Module">Module:</a></th><td>mod_proxy</td></tr>