Re: suexec question
Gasior <[email protected]>
| Newsgroups | gmane.comp.web.fastcgi.devel |
|---|---|
| Message-ID | <[email protected]> |
Just correcting myself. According to http://httpd.apache.org/docs/1.3/suexec.html pt.18 Target user/group have to be same as program's user/group So I was wrong in previous post - sorry. Regards. Gasior wrote: Hi Barti. Apache tells suexec under which uid/gid run application through User/Group directives (different in Apache2). If I remember right you can set owner of this script even to root. It cannot be writable by others and it cannot has suid/sgid bits set. This way script will be executed with proper UID/GID and users cannot modify it. Regards Gasior barti wrote: Hi List I've enabled suexec for one of my test domain. Suexec limitations dosent allow me to run phpcgi from outside of virtualhost docroot. I am thinking about security problem if I put bash script inside user docroot. #!/bin/sh export PHPRC PHP_FCGI_CHILDREN=1 export PHP_FCGI_CHILDREN exec /usr/local/bin/php If script should have user's rights means that user can change it. Is there any more elegant way barti ---------- ___________________________________ fastcgi-developers mailing list http://fastcgi.com/fastcgi-developers/ ---------- ___________________________________ fastcgi-developers mailing list http://fastcgi.com/fastcgi-developers/ ___________________________________ fastcgi-developers mailing list http://fastcgi.com/fastcgi-developers/