httpd-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Jason A. Dour" <...@bcc.louisville.edu>
Subject Re: wrappers for things other than cgi...
Date Mon, 24 Mar 1997 21:10:13 GMT
-----BEGIN PGP SIGNED MESSAGE-----

On Mon, 24 Mar 1997 jake@execpc.com wrote:
> Just curious if there'd been any talk of expanding the notion of user/group
> setuid "wrappers" around...
> 
>  - SSI: exec, include, and cgi (does it already do this?)
>  - mod_php: database, file functions, exec

	suEXEC already covers all SSI and CGI exec calls...with some
limitations imposed by the wrapper as to where programs may reside, et
cetera.

	PHP support would be upon the author of the module to conform to
the suEXEC wrapper design...

	There was also some brief talk about how to possibly drastically
alter the server code in version 2.0 to support user/group changing for
the entire process as a whole...to allow better filesystem/internal
security...  Nothing ever really came of it though...

Jason
# Jason A. Dour <jad@bcc.louisville.edu>                            1101
# Programmer Analyst II; Department of Radiation Oncology; Univ. of Lou.
# Finger for URLs, PGP public key, geek code, PJ Harvey info, et cetera.

-----BEGIN PGP SIGNATURE-----
Version: 2.6.2

iQCVAwUBMzbtt5o1JaC71RLxAQGZOgP/Qdye7gbpqyw1JKq2ZG0/R0lhhOA2C6mt
RlzYbiFJSSia79cl6e/Lfyjdvd8cg9Y9a/IXDY7I9LNJSqZWn3I7a6GzI+Snyj3T
xzm7vedy8yZqtbV8NuB6e3Pl92R/BN5yMowji3sxdl6JfHEUE5dBmVoqNx3IBi13
GDO6tqPmZcA=
=y0jv
-----END PGP SIGNATURE-----


Mime
View raw message