On Mon, 19 Nov 2012, Olivier Berger wrote: > I think that if gitweb can run as a CGI, suEXEC should be able to run > it as the user, and not the web server.
No, because suexec has a lot of constraints and needs the user statically. But Roland has, IIRC, plans to make the forge¹ run as its own system user (the webserver the forge runs on, that is), and if that user had permission to read all repos, it could, using its own permission checks, let users access them. ① Though I wonder how that’d work considering it uses a system-wide Apache… bye, //mirabilos -- tarent solutions GmbH Rochusstraße 2-4, D-53123 Bonn • http://www.tarent.de/ Tel: +49 228 54881-393 • Fax: +49 228 54881-314 HRB 5168 (AG Bonn) • USt-ID (VAT): DE122264941 Geschäftsführer: Boris Esser, Sebastian Mancke _______________________________________________ Fusionforge-general mailing list [email protected] http://lists.fusionforge.org/cgi-bin/mailman/listinfo/fusionforge-general
