RE: [users@httpd] ScriptAlias file permissions deny execution

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



I was able to have someone send me the actual log entry. Her it is.

[Thu Apr 20 12:57:12 2006] [error] [client 214.4.227.224] file
permissions deny server execution: /opt/cognos/c8/cgi-bin/cognos.cgi

Thanks

-----Original Message-----
From: jslive@xxxxxxxxx [mailto:jslive@xxxxxxxxx] On Behalf Of Joshua
Slive
Sent: Wednesday, April 19, 2006 1:36 PM
To: users@xxxxxxxxxxxxxxxx
Subject: Re: [users@httpd] ScriptAlias file permissions deny execution

On 4/19/06, DeVelvis, Ralph (US SSA) <ralph.develvis@xxxxxxxxxxxxxx>
wrote:
> It says file permissions deny execution.

No, that's not an exact quote.  When you paraphrase error messages,
you make things much more difficult.

>
> I haven't done:
>
> su - nobody
> cd /full/path/to/cgi-bin
> ./cgi-script
>
> I did do this:
>
> su - nobody -c /full/path/to/cgi-bin/cgi-script
>
> and the script runs.

If I guessed correctly about what your *real* error message is, then
the following is the code that is failing.  This implies either the
userid running apache isn't what you think it is, or the permissions
are not correct.

API_EXPORT(int) ap_can_exec(const struct stat *finfo)
{
#ifdef MULTIPLE_GROUPS
    int cnt;
#endif
#if defined(OS2) || defined(WIN32) || defined(NETWARE)
    /* OS/2 dosen't have Users and Groups */
    return 1;
#else
    if (ap_user_id == finfo->st_uid)
	if (finfo->st_mode & S_IXUSR)
	    return 1;
    if (ap_group_id == finfo->st_gid)
	if (finfo->st_mode & S_IXGRP)
	    return 1;
#ifdef MULTIPLE_GROUPS
    for (cnt = 0; cnt < NGROUPS_MAX; cnt++) {
	if (group_id_list[cnt] == finfo->st_gid)
	    if (finfo->st_mode & S_IXGRP)
		return 1;
    }
#endif
    return ((finfo->st_mode & S_IXOTH) != 0);
#endif
}

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server
Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
   "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx



---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
   "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx



[Index of Archives]     [Open SSH Users]     [Linux ACPI]     [Linux Kernel]     [Linux Laptop]     [Kernel Newbies]     [Security]     [Netfilter]     [Bugtraq]     [Squid]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Samba]     [Video 4 Linux]     [Device Mapper]

  Powered by Linux