apache suexec


 
Thread Tools Search this Thread
Top Forums UNIX for Advanced & Expert Users apache suexec
# 1  
Old 08-03-2005
Data apache suexec

I compiled apache 1.3.33 with suexec support like

./configure \
"--with-layout=Apache" \
"--prefix=/usr/local/apache" \
"--enable-module=ssl" \
"--activate-module=src/modules/php4/libphp4.a" \
"--activate-module=src/modules/perl/libperl.a" \
"--enable-module=perl" \
"--enable-module=most" \
"--enable-suexec" \
"--suexec-uidmin=100" \
"--suexec-gidmin=100" \
"--suexec-userdir=public_html" \
"--suexec-caller=nobody" \
"--suexec-logfile=/wallaby-local/apache/logs/suexec_log" \

Everthing is working fine, when I run a cgi script through web it is suexec wrappered and only runs as the user who own the script,
but I run php script is not being suexec wrapper and runs as the user nobody which is a security risk.

How do I enable PHP being executed through suexec?

Thanks
Login or Register to Ask a Question

Previous Thread | Next Thread

9 More Discussions You Might Find Interesting

1. Red Hat

Process not running: /opt/java15/jdk/bin/java -classpath /opt/apache/apache-ant-1.7.0-mod/lib/ant-la

Have no idea on what the below error message is: Process not running: /opt/java15/jdk/bin/java -classpath /opt/apache/apache-ant-1.7.0-mod/lib/ant-launcher.jar org.apache.tools.ant.launch.Launcher -buildfile build.xml dist. Any help? (3 Replies)
Discussion started by: gull05
3 Replies

2. Shell Programming and Scripting

SUEXEC with passwordless option

Hi, I am using the below command in suexec -u webuser /local/Tomcat7//0/tc7u/tomcat7.sh status But it prompts for the password of executing user. Let me know if any options available for passwordless or supplying password in script. (0 Replies)
Discussion started by: pravinbtech
0 Replies

3. Web Development

Apache module development on apache 2.2

Hi, I'm new to developing modules for Apache. I understand the basics now and can develop something simple which allows a 'GET' request to happen, but what I want to do is actually 'POST' information to my site. I know the basic POST Request works and I can see that it is post by looking at... (2 Replies)
Discussion started by: fishman2001
2 Replies

4. Shell Programming and Scripting

Apache Help..

I have properly installed Apache server 2.0 on Linux redhat9 and its working fine and showing its test page from LAN Computers. Now i want to change the directory of apache so it can show my webpages. Can anyone tell me where i can do that ????? Please help in detail because i am facing... (1 Reply)
Discussion started by: wakhan
1 Replies

5. UNIX for Dummies Questions & Answers

How to use Suexec with Apache2 ?

Hello guys I'm trying to use Suexec in my computer. I've installed apache with default settings (so Suexec is installed with my emerge Apache , Gentoo) . My settings on /etc/conf.d/apache2 # SUEXEC Enables running CGI scripts (in USERDIR) through suexec. # USERDIR Enables /~username... (1 Reply)
Discussion started by: kernings
1 Replies

6. UNIX for Advanced & Expert Users

suexec problem

Hi all, I am trying to setup apache w/ suexec to avoid permission problems w/ apache user and website user and also to be able to run a second (test) domain on the same server. So far I got fcgi w/o suexec running perfectly (logs confirm that). But as soon as I enable the suexec statement in the... (0 Replies)
Discussion started by: harrstar
0 Replies

7. UNIX for Dummies Questions & Answers

Suexec solution

guys here's a section of my program written in perl. This part is used to create directories with 777 mode. Now i know about 777 being a security hole. Could anyone provide me a possible solution to this using suexec????????? Segment system mkdir ".$file_folder", 0777 or die "Can't make... (13 Replies)
Discussion started by: the_last_rites
13 Replies

8. UNIX for Dummies Questions & Answers

apache

on my webserver, and im sure many of you who also run one see this all the time, but the majority of my access log is filled with attempted exploits from computers compromised by some virus (NIMBDA?) and anyway i know this is harmless to an apache/linux webserver, but its annoying, anyway, on... (5 Replies)
Discussion started by: norsk hedensk
5 Replies

9. UNIX for Dummies Questions & Answers

apache

how must httpd.conf be configured to exec the php files? (2 Replies)
Discussion started by: user666
2 Replies
Login or Register to Ask a Question
DBI::ProfileDumper::Apache(3)				User Contributed Perl Documentation			     DBI::ProfileDumper::Apache(3)

NAME
DBI::ProfileDumper::Apache - capture DBI profiling data from Apache/mod_perl SYNOPSIS
Add this line to your httpd.conf: PerlSetEnv DBI_PROFILE DBI::ProfileDumper::Apache Then restart your server. Access the code you wish to test using a web browser, then shutdown your server. This will create a set of dbi.prof.* files in your Apache log directory. Get a profiling report with dbiprof: dbiprof /usr/local/apache/logs/dbi.prof.* When you're ready to perform another profiling run, delete the old files rm /usr/local/apache/logs/dbi.prof.* and start again. DESCRIPTION
This module interfaces DBI::ProfileDumper to Apache/mod_perl. Using this module you can collect profiling data from mod_perl applications. It works by creating a DBI::ProfileDumper data file for each Apache process. These files are created in your Apache log directory. You can then use dbiprof to analyze the profile files. USAGE
LOADING THE MODULE The easiest way to use this module is just to set the DBI_PROFILE environment variable in your httpd.conf: PerlSetEnv DBI_PROFILE DBI::ProfileDumper::Apache If you want to use one of DBI::Profile's other Path settings, you can use a string like: PerlSetEnv DBI_PROFILE 2/DBI::ProfileDumper::Apache It's also possible to use this module by setting the Profile attribute of any DBI handle: $dbh->{Profile} = "DBI::ProfileDumper::Apache"; See DBI::ProfileDumper for more possibilities. GATHERING PROFILE DATA Once you have the module loaded, use your application as you normally would. Stop the webserver when your tests are complete. Profile data files will be produced when Apache exits and you'll see something like this in your error_log: DBI::ProfileDumper::Apache writing to /usr/local/apache/logs/dbi.prof.2619 Now you can use dbiprof to examine the data: dbiprof /usr/local/apache/logs/dbi.prof.* By passing dbiprof a list of all generated files, dbiprof will automatically merge them into one result set. You can also pass dbiprof sorting and querying options, see dbiprof for details. CLEANING UP Once you've made some code changes, you're ready to start again. First, delete the old profile data files: rm /usr/local/apache/logs/dbi.prof.* Then restart your server and get back to work. MEMORY USAGE
DBI::Profile can use a lot of memory for very active applications. It collects profiling data in memory for each distinct query your application runs. You can avoid this problem with a call like this: $dbh->{Profile}->flush_to_disk() if $dbh->{Profile}; Calling "flush_to_disk()" will clear out the profile data and write it to disk. Put this someplace where it will run on every request, like a CleanupHandler, and your memory troubles should go away. Well, at least the ones caused by DBI::Profile anyway. AUTHOR
Sam Tregar <sam@tregar.com> COPYRIGHT AND LICENSE
Copyright (C) 2002 Sam Tregar This program is free software; you can redistribute it and/or modify it under the same terms as Perl 5 itself. perl v5.8.0 2002-11-29 DBI::ProfileDumper::Apache(3)