minor #6517 Add a warning about using same user for cli and web server (pasdeloup)

xabbuh · xabbuh · commit e84f9303221b · 2016-05-09T08:49:59.000+02:00
This PR was squashed before being merged into the 2.3 branch (closes #6517). Discussion ---------- Add a warning about using same user for cli and web server | Q | A | ------------- | --- | Doc fix? | yes | New docs? | no | Applies to | all | Fixed tickets | --- Commits ------- 1214ecc Add a warning about using same user for cli and web server
diff --git a/book/installation.rst b/book/installation.rst
@@ -228,6 +228,12 @@ If there are any issues, correct them now before moving on.
     configuration (e.g. commonly httpd.conf or apache2.conf for Apache) and setting
     its user to be the same as your CLI user (e.g. for Apache, update the ``User``
     and ``Group`` values).
+    
+    .. caution::
+    
+        If used in a production environment, be sure this user only has limited privileges
+        (no access to private data or servers, launch of unsafe binaries, etc.)
+        as a compromised server would give to the hacker those privileges.
 
     **2. Using ACL on a system that supports chmod +a (MacOS X)**
 
