apache suexec


 
Thread Tools Search this Thread
Top Forums UNIX for Advanced & Expert Users apache suexec
# 1  
Old 08-03-2005
Data apache suexec

I compiled apache 1.3.33 with suexec support like

./configure \
"--with-layout=Apache" \
"--prefix=/usr/local/apache" \
"--enable-module=ssl" \
"--activate-module=src/modules/php4/libphp4.a" \
"--activate-module=src/modules/perl/libperl.a" \
"--enable-module=perl" \
"--enable-module=most" \
"--enable-suexec" \
"--suexec-uidmin=100" \
"--suexec-gidmin=100" \
"--suexec-userdir=public_html" \
"--suexec-caller=nobody" \
"--suexec-logfile=/wallaby-local/apache/logs/suexec_log" \

Everthing is working fine, when I run a cgi script through web it is suexec wrappered and only runs as the user who own the script,
but I run php script is not being suexec wrapper and runs as the user nobody which is a security risk.

How do I enable PHP being executed through suexec?

Thanks
Login or Register to Ask a Question

Previous Thread | Next Thread

9 More Discussions You Might Find Interesting

1. Red Hat

Process not running: /opt/java15/jdk/bin/java -classpath /opt/apache/apache-ant-1.7.0-mod/lib/ant-la

Have no idea on what the below error message is: Process not running: /opt/java15/jdk/bin/java -classpath /opt/apache/apache-ant-1.7.0-mod/lib/ant-launcher.jar org.apache.tools.ant.launch.Launcher -buildfile build.xml dist. Any help? (3 Replies)
Discussion started by: gull05
3 Replies

2. Shell Programming and Scripting

SUEXEC with passwordless option

Hi, I am using the below command in suexec -u webuser /local/Tomcat7//0/tc7u/tomcat7.sh status But it prompts for the password of executing user. Let me know if any options available for passwordless or supplying password in script. (0 Replies)
Discussion started by: pravinbtech
0 Replies

3. Web Development

Apache module development on apache 2.2

Hi, I'm new to developing modules for Apache. I understand the basics now and can develop something simple which allows a 'GET' request to happen, but what I want to do is actually 'POST' information to my site. I know the basic POST Request works and I can see that it is post by looking at... (2 Replies)
Discussion started by: fishman2001
2 Replies

4. Shell Programming and Scripting

Apache Help..

I have properly installed Apache server 2.0 on Linux redhat9 and its working fine and showing its test page from LAN Computers. Now i want to change the directory of apache so it can show my webpages. Can anyone tell me where i can do that ????? Please help in detail because i am facing... (1 Reply)
Discussion started by: wakhan
1 Replies

5. UNIX for Dummies Questions & Answers

How to use Suexec with Apache2 ?

Hello guys I'm trying to use Suexec in my computer. I've installed apache with default settings (so Suexec is installed with my emerge Apache , Gentoo) . My settings on /etc/conf.d/apache2 # SUEXEC Enables running CGI scripts (in USERDIR) through suexec. # USERDIR Enables /~username... (1 Reply)
Discussion started by: kernings
1 Replies

6. UNIX for Advanced & Expert Users

suexec problem

Hi all, I am trying to setup apache w/ suexec to avoid permission problems w/ apache user and website user and also to be able to run a second (test) domain on the same server. So far I got fcgi w/o suexec running perfectly (logs confirm that). But as soon as I enable the suexec statement in the... (0 Replies)
Discussion started by: harrstar
0 Replies

7. UNIX for Dummies Questions & Answers

Suexec solution

guys here's a section of my program written in perl. This part is used to create directories with 777 mode. Now i know about 777 being a security hole. Could anyone provide me a possible solution to this using suexec????????? Segment system mkdir ".$file_folder", 0777 or die "Can't make... (13 Replies)
Discussion started by: the_last_rites
13 Replies

8. UNIX for Dummies Questions & Answers

apache

on my webserver, and im sure many of you who also run one see this all the time, but the majority of my access log is filled with attempted exploits from computers compromised by some virus (NIMBDA?) and anyway i know this is harmless to an apache/linux webserver, but its annoying, anyway, on... (5 Replies)
Discussion started by: norsk hedensk
5 Replies

9. UNIX for Dummies Questions & Answers

apache

how must httpd.conf be configured to exec the php files? (2 Replies)
Discussion started by: user666
2 Replies
Login or Register to Ask a Question
Apache::Qpsmtpd(3pm)					User Contributed Perl Documentation				      Apache::Qpsmtpd(3pm)

NAME
Apache::Qpsmtpd - a mod_perl-2 connection handler for qpsmtpd SYNOPSIS
Listen 0.0.0.0:25 smtp AcceptFilter smtp none ## "smtp" and the AcceptFilter are required for Linux, FreeBSD ## with apache >= 2.1.5, for others it doesn't hurt. See also ## http://httpd.apache.org/docs/2.2/mod/core.html#acceptfilter ## and http://httpd.apache.org/docs/2.2/mod/mpm_common.html#listen LoadModule perl_module modules/mod_perl.so <Perl> use lib qw( /path/to/qpsmtpd/lib ); use Apache::Qpsmtpd; $ENV{QPSMTPD_CONFIG} = "/path/to/qpsmtpd/config"; </Perl> <VirtualHost _default_:25> PerlModule Apache::Qpsmtpd PerlProcessConnectionHandler Apache::Qpsmtpd # can specify this in config/plugin_dirs if you wish: PerlSetVar qpsmtpd.plugin_dirs /path/to/qpsmtpd/plugins PerlSetVar qpsmtpd.loglevel 4 </VirtualHost> DESCRIPTION
This module implements a mod_perl/apache 2.0 connection handler that turns Apache into an SMTP server using Qpsmtpd. It also allows you to set single-valued config options (such as loglevel, as seen above) using "PerlSetVar" in httpd.conf. This module should be considered beta software as it is not yet widely tested. However it is currently the fastest way to run Qpsmtpd, so if performance is important to you then consider this module. BUGS
Probably a few. Make sure you test your plugins carefully. The Apache scoreboard (/server-status/) mostly works and shows connections, but could do with some enhancements specific to SMTP. AUTHOR
Matt Sergeant, <matt@sergeant.org> Some credit goes to <mock@obscurity.org> for Apache::SMTP which gave me the inspiration to do this. perl v5.14.2 2009-04-02 Apache::Qpsmtpd(3pm)