Re: suexec question

Hi Barti,

I know 2 ways to solve this:

- use a custom version of suexec that allows execution outside of the 
virtual host.
(You might not want to do this if you use suexec exclusively to increase 
security on your
system. We use this approach because we use suexec only to solve the 
uID/gID problem)
- you can also leave the file in the virtual host with the permission of 
the right user and
protect the file using "chattr +i". The user will no longer be able to 
alter the file even though
he owns the directory and the file.
(This is not supported by all file systems though.)

Stefan Wendt


barti wrote:

>Hi List
>I've enabled suexec for one of my test domain.
>Suexec limitations dosent allow me to run phpcgi from outside of virtualhost
>docroot.
>I am thinking about security problem if I put bash script inside user
>docroot.
>   #!/bin/sh
>   export PHPRC
>   PHP_FCGI_CHILDREN=1
>   export PHP_FCGI_CHILDREN
>   exec /usr/local/bin/php
>If script should have user's rights means that user can change it.
>Is there any more elegant way
>
>barti
>
>  
>
>------------------------------------------------------------------------
>
>___________________________________
>fastcgi-developers mailing list
>http://fastcgi.com/fastcgi-developers/
>  
>

___________________________________
fastcgi-developers mailing list
http://fastcgi.com/fastcgi-developers/