| Huh? SuEXEC only works with mod_cgi (e.g. it requires the exec() part of
| it's name to get the Su part), it is not applicable to the persistant
| mod_perl world.

Ok, I must admit I mixed up referals to the concept (setuid()) and the
imlementation (suexec).

The point I was making was that even if - hypothetically spoken - you would
get Apache to do some set(e)uid() and set(e)gid() system calls just before
script startup (like the suexec utility does), you will not get the security
you want anyway.

Ime

Reply via email to