Dear all,

I have justed startet to experiment with suEXEC and Apache. I've successfully configured a web server with the suEXEC feature, and everything seems to work fine. However, there are a couple of things in the documentation which i am a little uncertain about. I am therefore hoping that someone kindly will be willing to share some of their knowledge here. For your reference, the documentation
can be found on http://httpd.apache.org/docs/2.0/suexec.html.

The suEXEC documentation outlines that it runs through 20 different checks before a given script is executed. What i am a little
uncertain about is the check #16 and #18.

#16. Is the target CGI/SSI program not writable by anyone else?
#18. Is the target user/group the same as the program's user/group.

My questions with regard to the above checks are:

1. With regard to #16, does "CGI/SSI program" mean the php parser itself?
2. With regard to #18, does "the program" refer to the same "CGI/SSI" program as described in #16?

Last, does the ownership of the actual script (say index.php) ever play a role in this context?

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
  "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org

Reply via email to