security!

After some time playing with modperl, i realized some problem (that's the way i call them) related with modperl! By looking the way modperl works today, it's clearly it were not desgined to SECURELY support a multi-user environment. For instance: Any user can write a script that will be able to r

security

Hi folks! I have a FreeBSD server configured as a http server, running apache. This installation includes mod_perl+EmbPerl, mod_php4 mod_cgi and mod_fastcgi. Some of my users will be using mysql for database. The problem is that this scenario requires sensitive information inside file. This means

Re: suexec denies execution of scripts

Vivek Khera wrote: > > >>>>> "GVGCR" == Gustavo Vieira Goncalves Coelho Rios <[EMAIL PROTECTED]> writes: > > GVGCR> Now the questions: Why i get this error "command not in docroot"? > > Dunno. mod_perl doesn't use suexec nor c

suexec denies execution of scripts

hi folks! I am trying to get virtualhosts configured so it permited to execute my scripts from them. The problem is that when i call my scripts using the domain uri i get an error on suexec_log. Here is it: [2001-02-01 17:44:45]: error: command not in docroot (/usr/home/hortalica/.public_html/c

Re: parsing an apache-like conf-file

Jonas Nordström wrote: > > I have a proxy-application that I want to make as generic as possible by > using configure files. > I have a configure file that looks something like: > > >ko-web.ei.sigma.se > > > > > info.ei.sigma.se > > > info.ei.sigma.se >

security

Hi folks! I have just seted mod_perl with apache and i am using embperl too. I am worried about security concerns for mod_perl. How can i limit, for instance, the amount of memory used for embperl? the ammount of time allowed for a perl code to spend. With php is easy, there is directives like

Re: cannot execute my cgi perls

"G.W. Haywood" wrote: > > Hi G, > > On Wed, 17 Jan 2001, Gustavo Vieira Goncalves Coelho Rios wrote: > > > [Wed Jan 17 18:04:41 2001] [error] [client 192.168.1.11] Premature end > > of script headers: /home/grios/.public_html/cgi-bin/bench3.cgi > >

cannot execute my cgi perls

Hi folks, i have setted my apache box, but i am facing some problem with executing my cgi (of course perl ones). That's all i get from error_log: [Wed Jan 17 18:04:41 2001] [error] [client 192.168.1.11] Premature end of script headers: /home/grios/.public_html/cgi-bin/bench3.cgi May some one he

mod perl and embperl

hi folks! Here am i again with some doubts once more. I have installed mod_perl as a DSO for apache, everything is ok! Now i am in need for embperl, the problem begins when i perl Makefile.PL, it asks me for apache source! Since i have every apache module as DSO i have deleted everything related

Re: installing modperl

"G.W. Haywood" wrote: > > Hi again, > > On Wed, 17 Jan 2001, Gustavo Vieira Goncalves Coelho Rios wrote: > > > Security (First), > > Performance (Second). > > These are large subjects in their own right and will not properly be > covered by the

Re: installing modperl

"G.W. Haywood" wrote: > > Hi there, > > On Wed, 17 Jan 2001, Gustavo Vieira Goncalves Coelho Rios wrote: > > > Where can i obtain such packages ? > > CPAN. LWP is not necessary for a working mod_perl but it's > recommended for the test suite (a

installing modperl

Dear gentleman/madam, this is my first post to the modperl mailing list. I am trying to get modperl compiling over FreeBSD-4.2Stable, but until now i am having some problem, here is what i get when i try to build it: grios@etosha$ perl Makefile.PL USE_APXS=1 WITH_APXS=/usr/local/apache/bin/apxs