You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@httpd.apache.org by Rob Hartill <ro...@imdb.com> on 1996/11/25 22:16:30 UTC

Re: WWW Form Bug Report: "suexec doesn't check for symlinked home directory" on Solaris 2.x

okay, thanks for the info.

cheers,
rob

louis@webindonesia.com wrote:
>
>Submitter: louis@webindonesia.com
>Operating system: Solaris 2.x, version: 
>Version of Apache Used: 1.2b0
>Extra Modules used: 
>URL exhibiting problem: 
>
>Symptoms:
>--
>Just downloaded the 1.2b0 tarball:
>
>from suexec.c
>---
>    if (userdir)
>    {
>        doclen = strlen (pw->pw_dir);
>        if (strncmp (cwd, pw->pw_dir, doclen))
>        {
>            log_err ("command not in docroot (%s/%s)\n", cwd, cmd);
>            exit (106);
>        }
>--
>  
>on my system getcwd returned /export/home/me
>while pw->pwdir returned /home/me
>
>--
>
>Backtrace:
>--
>
>--
>


-- 
Rob Hartill.       Internet Movie Database Ltd.    http://www.imdb.com/