httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Xavier Decoret <deco...@graphics.lcs.mit.edu>
Subject [users@httpd] Strange <--#exec cmd= behaviour
Date Thu, 13 Feb 2003 05:14:07 GMT
Hello,
I am running the server:

Server Version: Apache-AdvancedExtranetServer/1.3.26 (Mandrake 
Linux/6.1mdk) mod_ssl/2.8.10 OpenSSL/0.9.6g sxnet/1.2.4 PHP/4.2.3
Server Built: Oct 9 2002 16:23:21

and I have a strange behaviour of SSI exec command.
The following works:
<!--#exec cmd="foo" -->
where foo is a perl script located in the same directory than the web 
page containing directive, and that just prints "hello world". This 
suggests that SSI is activated correctly (includes directive works too).
But the following does not work:
<!--#exec cmd="ls" -->
Which as far as I understand should be the basis of exec functionnality.
More annoying ( I could emulate ls trhu perls script) is the fact that I 
cannot pass arguments. The following fails:
<!--#exec cmd="foo a_param" -->

When looking at /var/log/httpd/suexec_log, I can read the following:
[2003-02-13 05:08:30]: info: (target/actual) uid: (decoret/decoret) gid: 
(decoret/decoret) cmd: foo
[2003-02-13 05:08:30]: info: (target/actual) uid: (decoret/decoret) gid: 
(decoret/decoret) cmd: ls
[2003-02-13 05:08:30]: error: cannot stat program: (ls)
[2003-02-13 05:08:30]: info: (target/actual) uid: (decoret/decoret) gid: 
(decoret/decoret) cmd: foo bar
[2003-02-13 05:08:30]: error: cannot stat program: (foo bar)

which suggests:
1) it cannot find ls as a command
2) it consider cmd="foo bar" as a single cmd name.

Can you tell me if it is a wanted feature of Apache version 1.3.26 for 
security reason, in which case can you point me to the place in 
documentation that specify this. Or is it that something is missing in 
my configuration file, or something I am doing wrong. The fact is that 
all those stuff works perfectly on another Apache server, version

Apache-AdvancedExtranetServer/1.3.22 (Mandrake Linux/1.1mdk) DAV/1.0.3 
mod_ssl/2.8.5 OpenSSL/0.9.6b PHP/4.0.

for which I cannot unfortunately get the configuration file to compare 
with mine.

Thanks for any hint.


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Mime
View raw message