[users@httpd] SuExec and symlinks, again

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi.

I have another question about SuExec and symlinks. Now I've found out that linking to executables via symlinks violates SuExecs security model.

However, suexec only checks for things inside docroot doesn't it? If a symlink is present outside of that it wouldn't violate the security model and would as such the cgis could be run, is this correct?

Could I symlink "public_html" to "my_own_private_html"-dir and things would work? What if my homedir was a link, would that work?

Any input is appreciated.

Oscar

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
  "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx



[Index of Archives]     [Open SSH Users]     [Linux ACPI]     [Linux Kernel]     [Linux Laptop]     [Kernel Newbies]     [Security]     [Netfilter]     [Bugtraq]     [Squid]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Samba]     [Video 4 Linux]     [Device Mapper]

  Powered by Linux