Re: [us...@httpd] suexec for another user

2010-08-12 Thread Phil Howard
On Wed, Aug 11, 2010 at 18:24, David Ricar r...@ethernet.cz wrote: Phil Howard wrote: For maintenance, it might be easier for you to make an suexec wrapper.  Run your wrapper to do custom checks and if it decides to go on, it runs suexec.  That way your maintenance is for your program, only

Re: [us...@httpd] Need help with VirtualHost/forwarding

2010-08-12 Thread Phil Howard
On Thu, Aug 12, 2010 at 10:37, Mike Soultanian msoul...@csulb.edu wrote: server - the problem is that it can't be done for another couple weeks (IT department won't do it right away as it involves restarting all of the servers and a whole change management process). Remind me to not ever

Re: [us...@httpd] suexec for another user

2010-08-12 Thread Phil Howard
On Thu, Aug 12, 2010 at 09:49, David Ricar r...@ethernet.cz wrote: I need just one thing: replace others writable tests by is_in_homedir test - suexec does not solve, who could rewrite the code, but where the code is located. My patch is rather naive and dirty proof of concept right now, I

Re: [us...@httpd] Need help with VirtualHost/forwarding

2010-08-12 Thread Phil Howard
On Thu, Aug 12, 2010 at 12:41, Mike Soultanian msoul...@csulb.edu wrote: On 8/12/2010 9:33 AM, Phil Howard wrote: No backup staff ... ouch. budget cuts? :) Down to one administrator, I assume. there is no plan to get them out of that folder - www.csulb.edu/colleges/cota is the final

Re: [us...@httpd] suexec for another user

2010-08-12 Thread Phil Howard
On Thu, Aug 12, 2010 at 13:02, David Ricar r...@ethernet.cz wrote: [...] Sorry, I'm still not understanding what you are doing. I didn't understand why you need two users per each site. -- sHiFt HaPpEnS! - The official

Re: [us...@httpd] suexec for another user

2010-08-11 Thread Phil Howard
On Wed, Aug 11, 2010 at 09:23, David Ricar r...@ethernet.cz wrote: Hello, I don't think I see anything you are trying to accomplish different than an ordinary multiuser server. You should be able to configure where CGI can be run from to a narrow space. I assume FTP is for the site owner to