Received: by taz.hyperreal.com (8.6.12/8.6.5) id MAA23829; Fri, 26 Jul 1996 12:19:30 -0700 Received: from life.ai.mit.edu by taz.hyperreal.com (8.6.12/8.6.5) with SMTP id MAA23820; Fri, 26 Jul 1996 12:19:27 -0700 Received: from volterra.ai.mit.edu by life.ai.mit.edu (4.1/AI-4.10) for new-httpd@hyperreal.com id AA03456; Fri, 26 Jul 96 15:19:25 EDT From: rst@ai.mit.edu (Robert S. Thau) Received: by volterra.ai.mit.edu (8.6.12/AI-4.10) id PAA09822; Fri, 26 Jul 1996 15:19:24 -0400 Date: Fri, 26 Jul 1996 15:19:24 -0400 Message-Id: <199607261919.PAA09822@volterra.ai.mit.edu> To: new-httpd@hyperreal.com Subject: Re: CGI problems Sender: owner-new-httpd@apache.org Precedence: bulk Reply-To: new-httpd@hyperreal.com However, once we can setuid to the owner of the script, it becomes *very* useful. ... if it is applied to setuid-treated (invoked-through-wrapper, I assume) scripts *only*. rst