Re: apache suexec, non-standard docroot
Fabio Massimo Di Nitto [EMAIL PROTECTED] writes: On Thu, 8 Jul 2004, R.M. Evers wrote: thanks for your speedy reply. so it's possible to only recompile suexec? or do you mean i have to recompile apache with proper patching? suexec is compiled together with apache. It is possible to compile suexec on its own but it is much more complicate than compiling it together with apache, because suexec links with 2 libraries that are created while apache builds. I think that there are many admins out there who would like to be able to build their own suexec more easily than they can right now. This is my idea to acheive this: * Build suexec as a separate binary package (apache-suexec or apache2-suexec). * Possibly build more than one apache-suexec-* package with different configurations that are commonly used by webserver admins * Provide infrastructure to build an apache-suexec-custom package. This is done by the Exim4 maintainers for admins who are not content with the available selection of exim4-daemon-light and exim4-daemon-heavy packages. What do you think? Cheers, -Hilko
apache suexec, non-standard docroot
dear list, today i wanted to enable apache's suexec mechanism on one of our debian woody webservers, so that our customers can use cgi more securely. but in my infinite wisdom, i created all user accounts under /home/domains, instead of /var/www.. this means that, when suexec is enabled for a vhost, running a cgi script will result in an internal server error since debian's apache is configured with --suexec-docroot=/var/www. changing my configuration to conform to this standard is way too much work. and i really, really don't want to recompile apache.. so, does anyone know of a way to use suexec with a non-standard docroot for vhosts? or is this just simply impossible? thanks in advance. regards, -rodi.
Re: apache suexec, non-standard docroot
On Thu, 8 Jul 2004, R.M. Evers wrote: dear list, today i wanted to enable apache's suexec mechanism on one of our debian woody webservers, so that our customers can use cgi more securely. but in my infinite wisdom, i created all user accounts under /home/domains, instead of /var/www.. this means that, when suexec is enabled for a vhost, running a cgi script will result in an internal server error since debian's apache is configured with --suexec-docroot=/var/www. changing my configuration to conform to this standard is way too much work. and i really, really don't want to recompile apache.. so, does anyone know of a way to use suexec with a non-standard docroot for vhosts? or is this just simply impossible? You need to recompile suexec with proper patching. There is no other way around it other than changing your setup. Fabio -- user fajita: step one fajita Whatever the problem, step one is always to look in the error log. user fajita: step two fajita When in danger or in doubt, step two is to scream and shout.
Re: apache suexec, non-standard docroot
On Thu, 2004-07-08 at 13:56, Fabio Massimo Di Nitto wrote: On Thu, 8 Jul 2004, R.M. Evers wrote: dear list, today i wanted to enable apache's suexec mechanism on one of our debian woody webservers, so that our customers can use cgi more securely. but in my infinite wisdom, i created all user accounts under /home/domains, instead of /var/www.. this means that, when suexec is enabled for a vhost, running a cgi script will result in an internal server error since debian's apache is configured with --suexec-docroot=/var/www. changing my configuration to conform to this standard is way too much work. and i really, really don't want to recompile apache.. so, does anyone know of a way to use suexec with a non-standard docroot for vhosts? or is this just simply impossible? You need to recompile suexec with proper patching. There is no other way around it other than changing your setup. Fabio fabio, thanks for your speedy reply. so it's possible to only recompile suexec? or do you mean i have to recompile apache with proper patching? kind regards, -rodi
Re: apache suexec, non-standard docroot
On Thu, 8 Jul 2004, R.M. Evers wrote: thanks for your speedy reply. so it's possible to only recompile suexec? or do you mean i have to recompile apache with proper patching? suexec is compiled together with apache. It is possible to compile suexec on its own but it is much more complicate than compiling it together with apache, because suexec links with 2 libraries that are created while apache builds. Fabio -- user fajita: step one fajita Whatever the problem, step one is always to look in the error log. user fajita: step two fajita When in danger or in doubt, step two is to scream and shout.
Re: apache suexec, non-standard docroot
On Thu, 2004-07-08 at 14:42, Fabio Massimo Di Nitto wrote: suexec is compiled together with apache. It is possible to compile suexec on its own but it is much more complicate than compiling it together with apache, because suexec links with 2 libraries that are created while apache builds. Fabio ok, i'll go ponder.. :-) thank you very much, fabio. regards, -rodi.
