Hi Michael:
> Making a symlink to there dooes not work because of permissions probs.
It should work if the follow symlinks directives is set in httpd.conf.
Your sysadmin should have info about setting that. Take a look below as
well.
> 1. Should I change a conf file and make mikel/src../monte-carlo
> allowable as a directory from which to run cgi's?
Yes, you can do that in the main httpd conf. See below.
> 2. Should I somehow symlink from /home/httpd/html to there and change
> permission so it can run?
yes, you can do that as well. All thanks to the Follow Symlinks
directive in httpd.conf.
> 3. Should I put them in a /mikel/public_html directory?
If you mean cgi, it's most secure putting them under ~mike1/cgi-bin
instead of ~mike1/public_html/cgi-bin.
Again, it's the httpd.conf file that's key here.
> Should the files in these directories be owned by root or by users
> security wise?
CGI programs run with the persmissions of the httpd server. Typically
the login running the httpd server is "httpd" or "nobody" with zero
permissions. You have to set the files permissions to -rwxr-xr-x to make
this possible.
> I presume if they are owned by users Aapche will still run them as root
> which might be dangerous.
Thankfully not. :)
> If owned by users does that means that they are more accessable by
> outsiders to tamper with?
> What should the permissions be:
> The Apache index.html is set as -rw-r--r--
>
> Eventually these files will be on my Pentium box in my office here and
> students will run the exp via a Linux 486 box and enter
> http://mypentiumbox/monte-carlo.html into their browser.
I'm not clear how the 2 machine configuration works. Could you explain
that?
Here's an annotated clip from my httpd.conf:
-------------------------------
DocumentRoot /home/httpd/htdocs/ ## The main server document root
AddModule mod_dir.c ## Think this follows the ~ for users' logins
## not sure though. Also needs Load Module
UserDir public_html ## Why the public_html directory is so called
### Section 2: 'Main' server configuration
User httpd
Group httpd
ServerAdmin [EMAIL PROTECTED]
Options ExecCgi Includes
<Directory />
Options FollowSymLinks Indexes ## follows symlinks from
/home/httpd/htdocs/
AllowOverride All
</Directory>
## This maps "http://myserver/cgi-bin/xyz" to file xyz in
"/home/sonamc/cgi-bin/"
## File xyz permissions: rwxr-xr-x ("chmod 755 xyz" will do this)
ScriptAlias /cgi-bin/ "/home/sonamc/cgi-bin/"
<Directory /home/sonamc/cgi-bin/>
Options ExecCGI Includes ## To make .shtml files work
</Directory>
-------------------------------
Hope it helps:
Sincerely
Sonam
--
SLUG - Sydney Linux Users Group Mailing List - http://www.slug.org.au
To unsubscribe send email to [EMAIL PROTECTED] with
unsubscribe in the text