httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Steve" <steve...@iprimus.com.au>
Subject Re: [users@httpd] Run Scripts As root
Date Fri, 15 Nov 2002 03:54:29 GMT
http://www.phpbuilder.com/mail/php-install/2002012/0008.php
http://www.phpbuilder.com/mail/php3-list/199910/3762.php

Other options there..

But how would i go about compileing php as cgi

/Steve
----- Original Message -----
From: "Joshua Slive" <joshua@slive.ca>
To: <users@httpd.apache.org>
Sent: Friday, November 15, 2002 2:26 PM
Subject: Re: [users@httpd] Run Scripts As root


>
> On Thu, 14 Nov 2002, Chris Gorman wrote:
> > Take a look at the suEXEC wrapper.  IIRC, you have to enable this
feature
> > when building apache, but things may have changed since I last built it.
> >
> > http://httpd.apache.org/docs/suexec.html
> >
> > On Fri, 15 Nov 2002, Steve wrote:
> >
> > > Hey,
> > >         I Have a few php scripts im working on and i was wondering if
its
> > > possible to make apache exe some scripts as root.. so i can make the
php
> > > script run root commands on the server..
>
> No, suexec will not run scripts as root.  But you are on the right general
> track.
>
> The only way to do this is to run php as a CGI and make some kind of suid
> wrapper that will launch it as root.  As others have pointed out, it's not
> really a good idea.  One way to make it a little more safe is to hard-code
> everything so that there is absolutely no way for client-input to
> compromise the script.
>
> Joshua.
>
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>    "   from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Mime
View raw message