Return-Path: 
 <bugs-return-15339-apmail-httpd-bugs-archive=httpd.apache.org@httpd.apache.org>
Delivered-To: apmail-httpd-bugs-archive@www.apache.org
Received: (qmail 88793 invoked from network); 19 Sep 2004 21:34:25 -0000
Received: from hermes.apache.org (HELO mail.apache.org) (209.237.227.199)
  by minotaur-2.apache.org with SMTP; 19 Sep 2004 21:34:25 -0000
Received: (qmail 44482 invoked by uid 500); 19 Sep 2004 21:34:24 -0000
Delivered-To: apmail-httpd-bugs-archive@httpd.apache.org
Received: (qmail 44441 invoked by uid 500); 19 Sep 2004 21:34:24 -0000
Mailing-List: contact bugs-help@httpd.apache.org; run by ezmlm
Precedence: bulk
List-Post: <mailto:bugs@httpd.apache.org>
List-Help: <mailto:bugs-help@httpd.apache.org>
List-Unsubscribe: <mailto:bugs-unsubscribe@httpd.apache.org>
List-Subscribe: <mailto:bugs-subscribe@httpd.apache.org>
Reply-To: "Apache HTTPD Bugs Notification List" <bugs@httpd.apache.org>
Delivered-To: mailing list bugs@httpd.apache.org
Received: (qmail 44424 invoked by uid 99); 19 Sep 2004 21:34:24 -0000
X-ASF-Spam-Status: No, hits=0.0 required=10.0
	tests=NO_REAL_NAME
X-Spam-Check-By: apache.org
Received: from [192.18.33.10] (HELO exchange.sun.com) (192.18.33.10)
  by apache.org (qpsmtpd/0.28) with SMTP; Sun, 19 Sep 2004 14:34:22 -0700
Received: (qmail 29654 invoked by uid 50); 19 Sep 2004 21:36:12 -0000
Date: 19 Sep 2004 21:36:12 -0000
Message-ID: <20040919213612.29653.qmail@nagoya.betaversion.org>
From: bugzilla@apache.org
To: bugs@httpd.apache.org
Cc: 
Subject: DO NOT REPLY [Bug 31302] New:  -
    suexec doesn't execute commands if they're not in the current dir
X-Virus-Checked: Checked
X-Spam-Rating: minotaur-2.apache.org 1.6.2 0/1000/N

DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=31302>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=31302

suexec doesn't execute commands if they're not in the current dir

           Summary: suexec doesn't execute commands if they're not in the
                    current dir
           Product: Apache httpd-2.0
           Version: 2.0.50
          Platform: PC
        OS/Version: FreeBSD
            Status: NEW
          Severity: Critical
          Priority: Other
         Component: mod_include
        AssignedTo: bugs@httpd.apache.org
        ReportedBy: divisor@ad69.com


(I have apache 2.0.51 but can't select it from the version list)

I have the following problem:

There's some virtualhost with suexec enabled and vh directory with includes enabled.

I've created test.shtml page and trying to execute cgi command from it:

<!--#exec cmd="sample.cgi" -->
this one works ok

suexec log output:
uid: (1000/divisor) gid: (45000/45000) cmd: sample.cgi

then I move sample.cgi to the some dir i.e. called '5' and change test.shtml
content to

<!--#exec cmd="./5/sample.cgi" -->
this one stops working

suexec log output:
uid: (1000/divisor) gid: (45000/45000) cmd: sample.cgi
[2004-09-20 00:18:00]: cannot stat program: (sample.cgi)

but works fine if disable suexec in the virtualhost config.

virtualhost config example:

<VirtualHost 172.16.1.1:80>
ServerAdmin  webmaster@domain.com
DocumentRoot /home/divisor/domain.com
ServerName   domain.com
SuexecUserGroup divisor divisor
<DIRECTORY //home/divisor/domain.com>
OPTIONS  Indexes FollowSymLinks Includes
AllowOverride All
</DIRECTORY>
IndexOptions FancyIndexing
</VirtualHost>

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org