Adam Megacz wrote:
> AdamC, I assume you're going to have domtool generate the suexec/suphp
> lines in the Apache configuration, right?

Yes, but those lines don't specify a wrapper binary to run.  The Apache 
modules would probably need to be recompiled to change that.  We could 
always swap out the binaries installed by Debian for copies of your 
script hardcoded to call the normal wrappers, or we could follow my 
initial suggestion of adding the proper code to the source of suexec and 
suphp.

It would definitely be nicer to do it with a separate wrapper if we can, 
but I'm not sure if the Apache modules don't have some paranoid 
"safeguard" that would break this.

It's also true that we need to recompile, anyway, to change the document 
roots.  (I think we mostly agree that only allowing member CGI scripts 
to be accessed through /~username URI's is a big enough pain to be worth 
recompiling.)  It's quite easy to add AFS code inline while doing so.  
This would at least make 'ps' trees easier to read. :)

_______________________________________________
HCoop-SysAdmin mailing list
[email protected]
http://hcoop.net/cgi-bin/mailman/listinfo/hcoop-sysadmin

Reply via email to