You are viewing a plain text version of this content. The canonical link for it is here.
Posted to apache-bugdb@apache.org by Brian Reichert <re...@numachi.com> on 1998/06/06 01:26:17 UTC
general/2360: suexec for general access of user content?
>Number: 2360
>Category: general
>Synopsis: suexec for general access of user content?
>Confidential: no
>Severity: non-critical
>Priority: medium
>Responsible: apache
>State: open
>Class: change-request
>Submitter-Id: apache
>Arrival-Date: Fri Jun 5 16:30:00 PDT 1998
>Last-Modified:
>Originator: reichert@numachi.com
>Organization:
apache
>Release: apache_1.3b7
>Environment:
FreeBSD breichert.bbnplanet.com 2.2.6-RELEASE FreeBSD 2.2.6-RELEASE #0: Wed Jun 3 19:00:25 GMT 1998 root@breichert.bbnplanet.com:/usr/src/sys/compile/BREICHERT i386
>Description:
I try to run a tight ship; user accounts are _not_ world-accessable. The suexec wrapper for CGI programs looks keen, but can it be rigged to
The suexec access to CGI programs looked promising; but does not grant
the server access to all of the user's content ( though UserDir ).
Is there a way to cause the server to suexec for _any_ user content?
>How-To-Repeat:
>Fix:
>Audit-Trail:
>Unformatted:
[In order for any reply to be added to the PR database, ]
[you need to include <ap...@Apache.Org> in the Cc line ]
[and leave the subject line UNCHANGED. This is not done]
[automatically because of the potential for mail loops. ]