Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
Received-SPF: pass (asf.osuosl.org: local policy)
Message-ID: <20051129153010.ia12lvdqg44ow4cw@www.nbit.sigma.se>
Date: Tue, 29 Nov 2005 15:30:10 +0100
From: Oscar Haeger <Oscar.Haeger@nbit.sigma.se>
To: users@httpd.apache.org
References: <004201c5f4e1$465a5030$0200a8c0@SuzyPC>
In-Reply-To: <004201c5f4e1$465a5030$0200a8c0@SuzyPC>
MIME-Version: 1.0
Content-Type: text/plain;
	charset=ISO-8859-1;
	format="flowed"
Content-Disposition: inline
Content-Transfer-Encoding: 7bit
User-Agent: Internet Messaging Program (IMP) H3 (4.0.4)
Subject: [users@httpd] SuExec and symlinks, again

Hi.

I have another question about SuExec and symlinks. Now I've found out 
that linking to executables via symlinks violates SuExecs security 
model.

However, suexec only checks for things inside docroot doesn't it? If a 
symlink is present outside of that it wouldn't violate the security 
model and would as such the cgis could be run, is this correct?

Could I symlink "public_html" to "my_own_private_html"-dir and things 
would work? What if my homedir was a link, would that work?

Any input is appreciated.

Oscar

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org