Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
Date: Thu, 30 Jan 2003 11:40:24 -0500 (Est)
From: Joshua Slive <joshua@slive.ca>
To: users@httpd.apache.org
In-Reply-To: <3E395466.6030505@atmreports.com>
Message-ID: <Pine.WNT.4.53.0301301137580.1192@Poste3947>
References: <3E395466.6030505@atmreports.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Subject: Re: [users@httpd] CGI problem with mod_userdir


On Thu, 30 Jan 2003, Shawn Wilson wrote:

> THANK YOU!!!
>
> I can't believe it was something so incredibly simple (I knew it had to
> be something stupid). So, if you don't mind my asking, what is the
> purpose of suexec if Apache doesn't need it? I'm guessing it must have
> some good use and perhaps I just don't have it configured properly.

It makes cgi script run under a different userid than the main apache
binary.  It is useful for isolating cgi scripts from the server and from
each other.  It is especially useful on systems where multiple (perhaps
less-than trusted) users run cgi scripts, but it can also enhance security
on one-user systems by making sure that cgi scripts can't do things under
the webserver userid.

More info at http://httpd.apache.org/docs-2.0/suexec.html

Joshua.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org