Commit 45a408b8 authored by Poul-Henning Kamp's avatar Poul-Henning Kamp

update -r description

parent b7175b38
......@@ -110,14 +110,13 @@ OPTIONS
documents. This is a shortcut for specifying the
default_ttl run-time parameter.
-r param[,param...]
Specifies a list of parameters that are read only. This
gives the system administrator a way to limit what someone
with access to the Varnish CLI can do. In a very secure
environment you want to consider setting parameters such
as *user*, *group*, *cc_command*, *vcc_allow_inline_c* to
read only as these can potentially be used to escalate
privileges.
-r param[,param...]
Make the listed parameters read only. This gives the
system administrator a way to limit what the Varnish CLI can do.
Consider making parameters such as *user*, *group*, *cc_command*,
*vcc_allow_inline_c* read only as these can potentially be used
to escalate privileges from the CLI.
Protecting *listen_address* may also be a good idea.
-u user Specifies the name of an unprivileged user to which the child
process should switch before it starts accepting
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment