public inbox for gentoo-user@lists.gentoo.org
 help / color / mirror / Atom feed
From: Mike Kazantsev <mk.fraggod@gmail.com>
To: gentoo-user@lists.gentoo.org
Subject: Re: [gentoo-user]  Installing apache with USE='-suexec'
Date: Mon, 15 Jun 2009 21:39:48 +0600	[thread overview]
Message-ID: <20090615213948.71d246e2@coercion> (raw)
In-Reply-To: <87hbyhmy41.fsf@newsguy.com>

[-- Attachment #1: Type: text/plain, Size: 964 bytes --]

On Mon, 15 Jun 2009 08:21:18 -0500
Harry Putnam <reader@newsguy.com> wrote:

> Starting to emerge apache I see the default USE flags include
> -suexec.  I'm not much of an apache buff but wondered if that would
> have a bad effect on allowing users to run cig scripts.

cgi

> I'm not even sure its related... but recall something dimly about
> using suexec to run such scripts.

You probably confusing suid (elevated privileges) and shebang (first
line of the file, specifying what to run as an interpreter).

Suexec in apache probably doesn't have much use beyond hosting
platforms - it allows to handle different urls / vhosts with different
privileges, so, say, to return some "john.myserver.com" page apache will
drop privileges to local user "john", while serving "myserver.com" from
"www" user on the same port by the same daemon, so john's scripts won't
be able to access www-data and vice versa.

-- 
Mike Kazantsev // fraggod.net

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 198 bytes --]

      reply	other threads:[~2009-06-15 15:42 UTC|newest]

Thread overview: 2+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2009-06-15 13:21 [gentoo-user] Installing apache with USE='-suexec' Harry Putnam
2009-06-15 15:39 ` Mike Kazantsev [this message]

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20090615213948.71d246e2@coercion \
    --to=mk.fraggod@gmail.com \
    --cc=gentoo-user@lists.gentoo.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox