----- Original Message ----- From: "Joe Bifano" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Monday, January 21, 2002 8:26 PM Subject: Cgi permission Questions
> Hi all, > > My first time on the list. I have been looking at the archives but am not > able to find anything on this. > > I have 3 web servers, 1 development/nfs server and 2 database mysql servers > in a cluster server farm. All sites are owned by our company so nobody will > be on the system except for me. It is behind a firewall and a load-balancer > so it is pretty secure. > > I have several domains set up on the site called test.company.com, > demo.company.com, stage.company.com and company.com. company.com is only on > the 3 web servers and all the rest is on the development server. > > I have 2 employees that will be setting up a couple of things using a cgi > script called create.pl on test.company.com. When this script is run it has > to create new test companies or demo companies. > > Here is the problem: create.pl is owned by test and group test and has file > permissions 755. When the create.pl script is run it becomes owner apache > and group apache and has to create new files and directories on the machine. > All of the new files and directories then become owner apache and group > apace. I need them to stay as owner test and group test. Ummm I'm not completly sure, but if you activate the suid on create.pl, then create.pl will be executed as test and not as apache. And I think all files create.pl creates, also will own test:test chmod u+s create.pl that command will give create.pl the suid. > > I have used SuExec before and know that it will call create.pl and then > become owner test rather than owner apache but would like to know if there > was a different way to do this. The main reason for me not wanting to use > SuExec is because I want to learn and implement mod_perl and HTML::MASON for > this site down the road. > > Thanks for you reply's in advance. > > Joe > >
