[users@httpd] Re: Re: cgi scripts outside of cgi-bin

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Joshua Slive wrote:

> On 12/15/05, Boyle Owen <Owen.Boyle@xxxxxxx> wrote:
> 
>> Sadly, your program is not. The error message means that the script did
>> not produce the required CGI header information before any other data.
> 
> This is not quite the right direction.  In this case, the premature
> end of script headers is caused by a failure of suexec to launch the
> script because suexec's security restrictions were not met:
> 
>> > suexec.log says this:
>> >
>> > [2005-12-13 15:03:19]: uid: (501/sti) gid: (501/501) cmd: upload.cgi
>> > [2005-12-13 15:03:19]: directory is writable by others:
>> > (/home/sti/public_html/tragence/webapp/interfaces/weblib/pb_upload)
> 
> So he either needs to fix that problem (make the directory not
> writable by others) or disable suexec (find the binary and change its
> name).

The weird thing is that 'others' can't write to that dir:

$ ls -ld /home/sti/public_html/tragence/webapp/interfaces/weblib/pb_upload
drwxrwxr-x  3 sti sti 4096 Dec 15
15:42 /home/sti/public_html/tragence/webapp/interfaces/weblib/pb_upload

If I chmod it to 770, apache complains that it doesn't have permissions to
read the the cgi file (obviously).

The other weird thing is that apachectl -V says that suexec is
in /usr/sbin/suexec...but strangely enough, that file doesn't exist.

Also, to answer Owen's question...I simply cp'ed the script out of cgi-bin
to the aforementioned location.  No changes at all were made to the script. 
It works when in cgi-bin, but not outside of there.

> Joshua.

Thanks for the help,
-- Christopher


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
   "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx



[Index of Archives]     [Open SSH Users]     [Linux ACPI]     [Linux Kernel]     [Linux Laptop]     [Kernel Newbies]     [Security]     [Netfilter]     [Bugtraq]     [Squid]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Samba]     [Video 4 Linux]     [Device Mapper]

  Powered by Linux