www-apache-bugdb mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Marc Slemko <m...@hyperreal.org>
Subject Re: general/985: suggestion: check permissions via os-userbase
Date Mon, 11 Aug 1997 16:04:03 GMT
Synopsis: suggestion: check permissions via os-userbase

State-Changed-From-To: open-closed
State-Changed-By: marc
State-Changed-When: Mon Aug 11 09:04:01 PDT 1997
It is far more complicated than you make out to do so.
You then need to trust your web server with root and
Apache would have to run as root.  That isn't acceptable.
You also run into difficult issues with the (lack of) decent
security in web-based authentication.

We do have suexec, to let CGI scripts be run as users,
but it works slightly differently and is implemented by
an external wrapper that changes the uid.

Thanks for the suggestion.

View raw message