[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: SuexecUserGroup help required in apache2



Chris Jones wrote:
IIRC, you have to recompile Apache2 (or just the suexec wrapper) to change the Suexec docroot settings.

I don't know about apache2 but with apache 1.3 , you have to patch the source code before compiling it.

Our no doubt crude checklist for doing it is here:

http://thecsl.org/sys/cvs_projects/boxes/procedures/apache_upgrade_on_brave.txt

I don't know why allowing group writable cgi-bin files is not a run time option for apache. The alternative is to let people run as root....


For security reasons, they are set
at compile time

------------------------------------------------------------------------
*From:* Radhika [mailto:radhiilu@yahoo.com]
*Sent:* Thursday, 20 October 2005 5:58 PM
*To:* debian-isp@lists.debian.org
*Subject:* SuexecUserGroup help required in apache2

Hi,

After so much of investigation i found that my cgi scripts are not running because of "SuexecUserGroup" and giving the cgi scripts only for that perticular group and user.Because we are an ISP this feature much needed for each users *ex:- SuexecUserGroup test test*

I am getting the error message in suexec.log file as below
*[2005-10-19 11:32:19]: uid: (10090/test) gid: (10090/10090) cmd: search.cgi [2005-10-19 11:32:19]: command not in docroot (/home/www/test/htdocs/cgi-bin/search.cgi* ** I have enabled the suexec using a2enmod suexec i think definetely this suexec is taking default document root that is /var/www if i want to change this in debian how to do this. I am really thankful to this group all their help. Please some one who is having very goot talents in apache2 with suexec *I am running debian 3.1 apache2 perl v5.8.4.* Thank you so much for your help Best regards

------------------------------------------------------------------------
Yahoo! Music Unlimited - Access over 1 million songs. Try it free. <http://pa.yahoo.com/*http://us.rd.yahoo.com/evt=36035/*http://music.yahoo.com/unlimited/>



Reply to: