Mailing-List: contact bugs-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Apache HTTPD Bugs Notification List" <bugs@httpd.apache.org>
Date: Wed, 23 Feb 2005 22:29:26 +0100
Message-Id: <200502232129.j1NLTQRb026107@ajax.apache.org>
From: bugzilla@apache.org
To: bugs@httpd.apache.org
Subject: DO NOT REPLY [Bug 33716]  -
    suexec behavior/code doesn't match documented security model

DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG�
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=33716>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND�
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=33716


------- Additional Comments From dax@gurulabs.com  2005-02-23 22:29 -------
(In reply to comment #3)
> (In reply to comment #2)
> > Your POV. Actually a lot of people use suexec in order to be able to write their
> > content and not to disturb any other user on the system.
> 
> With my patch people can still OPTIONALLY write to their content. Currently the
> behavior is such that it is MANDATED that their content can be written to.
> 

A complete description of the change is:

Users who depend on the current behavior in regards to having cgis modifying
their content will not be effected by the patch. Things will still function as
expected. No change.

Users who don't want their content writable by cgis can adjust directory and
file ownerships to prevent this from happening. This is what the patch offers
and is was not possible before.

-- 
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org