Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
Received-SPF: pass (athena.apache.org: domain of ttiphil@gmail.com designates
 209.85.215.45 as permitted sender)
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=gamma;
        h=mime-version:in-reply-to:references:date:message-id:subject:from:to
         :content-type;
        b=J9n+vo9N36cxkq8c87uewqcxlptJQWFU98trDlrFSJ94ASz6Jj9Z3ECsagVzLJTVb2
         3mhcXtnxKTdb7ys47VMxcynQUCGaA9pyvOVwRy1ywzxBFJuKOzTDpKxFmXveDSIoI8BD
         aH2EoZ4spzvttBVa8H6s/T/ssXXsFk641f/vo=
MIME-Version: 1.0
In-Reply-To: <4C62A445.1020400@ethernet.cz>
References: <4C62A445.1020400@ethernet.cz>
Date: Wed, 11 Aug 2010 12:37:52 -0400
Message-ID: <AANLkTi==1m3AKdurXSJbBQrUxfXraLSfdfpVbmngvvb2@mail.gmail.com>
From: Phil Howard <ttiphil@gmail.com>
To: users@httpd.apache.org
Content-Type: text/plain; charset=ISO-8859-1
Subject: Re: [users@httpd] suexec for another user

On Wed, Aug 11, 2010 at 09:23, David Ricar <reg@ethernet.cz> wrote:
> Hello,

I don't think I see anything you are trying to accomplish different
than an ordinary multiuser server.  You should be able to configure
where CGI can be run from to a narrow space.  I assume FTP is for the
site owner to upload, including upload CGI.

For maintenance, it might be easier for you to make an suexec wrapper.
 Run your wrapper to do custom checks and if it decides to go on, it
runs suexec.  That way your maintenance is for your program, only, and
you have to track a lot fewer changes to Apache code (basically just
the suexec environment being passed along).

-- 
sHiFt HaPpEnS!

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org