Re[2]: suexec question

> - use a custom version of suexec that allows execution outside of the
> virtual host.
> (You might not want to do this if you use suexec exclusively to increase
> security on your
> system. We use this approach because we use suexec only to solve the
> uID/gID problem)


Hi

Gasior: Apache2's suexec checks if target program has the same uid/gid
"target uid/gid (500/502) mismatch with directory (500/502) or program
(0/0)"

Stefan: I think that using patched suexec is best choice but not recomended by
doc :)
I am using grsecurity to chroot apache and php so level of security is
higher than normal but can you tell me where can i find suexec patch?


barti

___________________________________
fastcgi-developers mailing list
http://fastcgi.com/fastcgi-developers/