ErrorLog /etc/some-important-database
LoadModule hidden_module /usr/local/viewcvs-0.9.3/pipeopen.py
SuexecWrapper /www/abc.example.com/bin/suexec

If random user can edit main conf file, things are pretty bad, at
least when root starts Apache.

Perhaps there are more current limitations on possible harm when
non-root starts Apache.

Any thoughts on avoiding hard-coded path to suexec?

Reply via email to