D&C GLug - Home Page

[ Date Index ] [ Thread Index ] [ <= Previous by date / thread ] [ Next by date / thread => ]

Re: [LUG] Prblem with webuser perms (suexec?)

 

Mike Martin wrote:
> Hi I am building a CGI app to used locally and I have hit a wall.
> 
> I want users to be able to select a file and then that file is passed
> to another program (ffmpeg in this case). However apache cannot access
> the home directory as permissions do not allow x perms.

If it is a CGI application, then I would have thought that it matters
only that the browser can see the file in question, not Apache. I think
you need to explain what you are trying to do just a little more.

> I have tried using suexec but docs seem a little sparce. This what I have

suexec carries a lot of security implications.

We do a number of setuid scripts where a CGI script really needs broader
permissions than the Apache user has. These also have security
implications, but at least we didn't move the whole mountain first.

-
The Mailing List for the Devon & Cornwall LUG
Mail majordomo@xxxxxxxxxxxxx with "unsubscribe list" in the
message body to unsubscribe. FAQ: www.dcglug.org.uk/linux_adm/list-faq.html