You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by abhishek jain <ma...@ejain.com> on 2008/01/21 07:59:26 UTC

[users@httpd] Dynamic mass virtual hosting with suEXEC

Hi ,
Is it possible to have mass virtual host (mod_vhost_alias) with Suexec .
I want the max. possible security,
Thanks,
Abhi

Re: [users@httpd] Dynamic mass virtual hosting with suEXEC

Posted by Graeme Fowler <gr...@graemef.net>.
On Mon, 2008-01-21 at 12:29 -0500, Joshua Slive wrote:
> Check out cgiwrap, which has somewhat different restrictions and
> configuration options.

Also see suPHP, which is a little different from suEXEC and cgiwrap.
It's possible to use suPHP with a small global config which lets the
filesystem metadata determine who a process runs as - the file owner, in
the simplest case.

Note that it originated as a wrapper for PHP (no s***, I hear you say)
but you can also run other executables through it as CGI scripts. I've
used it on a number of different servers now with no problems to speak
of.

> (I don't know if it will work for you, but it is worth a try.)

Ditto :)

Graeme


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Re: [users@httpd] Dynamic mass virtual hosting with suEXEC

Posted by Joshua Slive <jo...@slive.ca>.
On Jan 21, 2008 1:59 AM, abhishek jain <ma...@ejain.com> wrote:
> Hi ,
> Is it possible to have mass virtual host (mod_vhost_alias) with Suexec .
> I want the max. possible security,

No.

Check out cgiwrap, which has somewhat different restrictions and
configuration options.
(I don't know if it will work for you, but it is worth a try.)

Joshua.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org