When setting up the Apache web server inside an unprivileged chroot jail, I was surprised to find that the Apache logrotate program is run as root. That is too much privilege for the job. sh-apache is a minimal shell program that fixes this. Edit the makefile to specify the appropriate user and group privileges, and install the executable file inside the Apache chroot jail as /bin/sh. In order to start Apache inside a chroot jail I use a variant of my own chrootuid utility. This shell program drops privileges when run as root, and supports no shell special characters at all. It is a direct descendant from a more feature-rich shell program that I wrote for chrooted gopher daemons (see enclosed USENET article). Wietse Venema, wietse@porcupine.org