When setting up the Apache web server inside an unprivileged chroot
jail, I was surprised to find that the Apache logrotate program is
run as root.  That is too much privilege for the job.

sh-apache is a minimal shell program that fixes this.  Edit the
makefile to specify the appropriate user and group privileges, and
install the executable file inside the Apache chroot jail as /bin/sh.

In order to start Apache inside a chroot jail I use a variant of
my own chrootuid utility.

This shell program drops privileges when run as root, and supports
no shell special characters at all. It is a direct descendant from
a more feature-rich shell program that I wrote for chrooted gopher
daemons (see enclosed USENET article).

    Wietse Venema, wietse@porcupine.org
