Received: by taz.hyperreal.com (8.8.4/V2.0) id IAA14426;
 Fri, 24 Jan 1997 08:35:20 -0800 (PST)
Received: from bcc.louisville.edu by taz.hyperreal.com (8.8.4/V2.0) with ESMTP
 id IAA14407; Fri, 24 Jan 1997 08:35:14 -0800 (PST)
Received: from bcc.louisville.edu (jad@bcc.louisville.edu [136.165.140.24]) by
 bcc.louisville.edu (8.7.6/8.7.3) with SMTP id LAA25788;
 Fri, 24 Jan 1997 11:33:55 -0500
Date: Fri, 24 Jan 1997 11:33:51 -0500 (EST)
From: "Jason A. Dour" <jad@bcc.louisville.edu>
To: Matthew Emmerton <memmerto@undergrad.math.uwaterloo.ca>
Subject: Re: Apache 1.2b4 and suexec
In-Reply-To: <Pine.LNX.3.95.970124100740.25431A-100000@bcc.louisville.edu>
Message-ID: <Pine.LNX.3.95.970124112720.25743A-100000@bcc.louisville.edu>
Comments: Getting paid to be a geek is cool...
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: new-httpd-owner@apache.org
Precedence: bulk
Reply-To: new-httpd@hyperreal.com

-----BEGIN PGP SIGNED MESSAGE-----

To try to help ease your testing...  I'm attatching the latest development
(b5dev) version of suexec.c and suexec.h.

If you have any problems, please let us know...  At present there is a
known bug when passing a CGI argument such as:

	http://www.some.com/~whoever/cgi-bin/somecgi?somearg

This will fail...we are working on it.

We're also beefing up the comments in the code, as well as some other
security minded issues...  The development version can always either be
obtained through me, or through the Apache FTP site...

Jason
# Jason A. Dour <jad@bcc.louisville.edu>                            1101
# Programmer Analyst II; Department of Radiation Oncology; Univ. of Lou.
# Finger for URLs, PGP public key, geek code, PJ Harvey info, et cetera.

Bcc: Apache Development Group

-----BEGIN PGP SIGNATURE-----
Version: 2.6.2

iQCVAwUBMujkcpo1JaC71RLxAQHVbAQAmCkXnZDjVaz0jkDc8C0E8wmhd6fVHtCU
e/Tv3tIyIiaKyXKmjssOIGvrkZdeeBoHJ/vmfO9GgQ7hRf1944XEzntW4Bj+uqfs
2QpXtWKsOF9icsmL6pECzCUL2tNDNxpnlZdc3zMhZVmnICspUVBCSzgW7sXywUuR
SQbYoyVTZrM=
=w1Mj
-----END PGP SIGNATURE-----