[deployment-guide/comm-rel: 563/727] Updated the SuexecUserGroup directive description.

[Jaromir Hradilek]

commit 24f7e4c1790fe4b3ac9c30364ba9d7b41e6c9f58
Author: Jaromir Hradilek <jhradile at redhat.com>
Date:   Thu Sep 2 11:27:55 2010 +0200

    Updated the SuexecUserGroup directive description.

 en-US/The_Apache_HTTP_Server.xml |   44 ++++++++++++++++---------------------
 1 files changed, 19 insertions(+), 25 deletions(-)
---
diff --git a/en-US/The_Apache_HTTP_Server.xml b/en-US/The_Apache_HTTP_Server.xml
index 5409fde..d0ecd15 100644
--- a/en-US/The_Apache_HTTP_Server.xml
+++ b/en-US/The_Apache_HTTP_Server.xml
@@ -2002,6 +2002,25 @@ ErrorDocument 404 /404-not_found.html</screen>
             </example>
           </listitem>
         </varlistentry>
+        <varlistentry>
+          <term><option>SuexecUserGroup</option></term>
+          <listitem>
+            <para>
+              The <option>SuexecUserGroup</option> directive allows you to specify the user and group under which the CGI scripts will be run. It takes the following form:
+            </para>
+            <screen>SuexecUserGroup <replaceable>user</replaceable> <replaceable>group</replaceable></screen>
+            <para>
+              The <replaceable>user</replaceable> has to be an existing user, and the <replaceable>group</replaceable> must be a valid UNIX group.
+            </para>
+            <para>
+              Note that for security reasons, the CGI scripts should not be run with root privileges. In <option>&lt;VirtualHost&gt;</option>, this directive replaces the <option>User</option> and <option>Group</option> directives.
+            </para>
+            <example id="example-apache-httpdconf-suexecusergroup">
+              <title>Using the <option>SuexecUserGroup</option> directive</title>
+              <screen>SuexecUserGroup apache apache</screen>
+            </example>
+          </listitem>
+        </varlistentry>
       </variablelist>
       <formalpara id="s2-apache-indexoptions">
         <title>IndexOptions</title>
@@ -2029,31 +2048,6 @@ ErrorDocument 404 /404-not_found.html</screen>
       <para>
         <command>IndexOptions</command> has a number of other parameters which can be set to control the appearance of server generated directories. The <command>IconHeight</command> and <command>IconWidth</command> parameters require the server to include HTML <command>HEIGHT</command> and <command>WIDTH</command> tags for the icons in server generated webpages. The <command>IconsAreLinks</command> parameter combines the graphical icon with the HTML link anchor, which contains the URL link target.
       </para>
-      <formalpara id="s2-apache-suexecusergroup">
-        <title>SuexecUserGroup</title>
-        <indexterm>
-          <primary>Apache HTTP Server</primary>
-          <secondary>migration to 2.0</secondary>
-          <tertiary><filename>SuexecUserGroup</filename></tertiary>
-        </indexterm>
-        <indexterm>
-          <primary><command>SuexecUserGroup</command></primary>
-          <secondary>Apache configuration directive</secondary>
-        </indexterm>
-        <indexterm>
-          <primary>configuration directives, Apache</primary>
-          <secondary><command>SuexecUserGroup</command></secondary>
-        </indexterm>
-        <para>
-          The <command>SuexecUserGroup</command> directive, which originates from the <command>mod_suexec</command> module, allows the specification of user and group execution privileges for CGI programs. Non-CGI requests are still processed with the user and group specified in the <command>User</command> and <command>Group</command> directives.
-        </para>
-      </formalpara>
-      <note>
-        <title>Note</title>
-        <para>
-          From version 2.0, the <command>SuexecUserGroup</command> directive replaced the Apache HTTP Server 1.3 configuration of using the <command>User</command> and <command>Group</command> directives inside the configuration of <command>VirtualHosts</command> sections.
-        </para>
-      </note>
       <formalpara id="s2-apache-timeout">
         <title>Timeout</title>
         <indexterm>