You are viewing a plain text version of this content. The canonical link for it is here.
Posted to apache-bugdb@apache.org by Brian Reichert <re...@numachi.com> on 1998/06/06 01:26:17 UTC

general/2360: suexec for general access of user content?

>Number:         2360
>Category:       general
>Synopsis:       suexec for general access of user content?
>Confidential:   no
>Severity:       non-critical
>Priority:       medium
>Responsible:    apache
>State:          open
>Class:          change-request
>Submitter-Id:   apache
>Arrival-Date:   Fri Jun  5 16:30:00 PDT 1998
>Last-Modified:
>Originator:     reichert@numachi.com
>Organization:
apache
>Release:        apache_1.3b7
>Environment:
FreeBSD breichert.bbnplanet.com 2.2.6-RELEASE FreeBSD 2.2.6-RELEASE #0: Wed Jun  3 19:00:25 GMT 1998     root@breichert.bbnplanet.com:/usr/src/sys/compile/BREICHERT  i386
>Description:
I try to run a tight ship; user accounts are _not_ world-accessable.  The suexec wrapper for CGI programs looks keen, but can it be rigged to
The suexec access to CGI programs looked promising; but does not grant
the server access to all of the user's content ( though UserDir ).
Is there a way to cause the server to suexec for _any_ user content?
>How-To-Repeat:

>Fix:

>Audit-Trail:
>Unformatted:
[In order for any reply to be added to the PR database, ]
[you need to include <ap...@Apache.Org> in the Cc line ]
[and leave the subject line UNCHANGED.  This is not done]
[automatically because of the potential for mail loops. ]