[gentoo-user] Installing apache with USE='-suexec'

[gentoo-user] Installing apache with USE='-suexec'

[Harry Putnam]

Starting to emerge apache I see the default USE flags include
-suexec.  I'm not much of an apache buff but wondered if that would
have a bad effect on allowing users to run cig scripts.

I'm not even sure its related... but recall something dimly about
using suexec to run such scripts.

Re: [gentoo-user] Installing apache with USE='-suexec'

[Mike Kazantsev]

[-- Attachment #1: Type: text/plain, Size: 964 bytes --]

On Mon, 15 Jun 2009 08:21:18 -0500
Harry Putnam <reader@newsguy.com> wrote:

> Starting to emerge apache I see the default USE flags include
> -suexec.  I'm not much of an apache buff but wondered if that would
> have a bad effect on allowing users to run cig scripts.

cgi

> I'm not even sure its related... but recall something dimly about
> using suexec to run such scripts.

You probably confusing suid (elevated privileges) and shebang (first
line of the file, specifying what to run as an interpreter).

Suexec in apache probably doesn't have much use beyond hosting
platforms - it allows to handle different urls / vhosts with different
privileges, so, say, to return some "john.myserver.com" page apache will
drop privileges to local user "john", while serving "myserver.com" from
"www" user on the same port by the same daemon, so john's scripts won't
be able to access www-data and vice versa.

-- 
Mike Kazantsev // fraggod.net

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 198 bytes --]