Re: CGI differences in apache 2.0 and 2.2

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 




Perhaps I wasn't clear. ANY script with a 'system()' command fails to run as a gci script under apache 2.2. Even if the command that is being run is in the same directory as the script (/var/www/cgi-bin) and has 777 permissions.

And the same script does run under apache 2.0.

For both apaches the user and group settings are the same.


Thanks!

Steve P
Steve Swift wrote:
My only experience with apache under linux is with redhat, so there may be subtle differences.

In order to execute "ls" then the userid:group under which apache runs needs at least two things:

1. Execute access to the executable (typically /bin/ls)

2. To have the path to the executable (/bin in this case) in the PATH environment variable.

There may be additional restrictions on accessing/executing the /bin/ls command.

Can you logon as the user/group and execute the "ls" command? This is inconclusive if it works as the environment may be different. It would probably be a better test if you could issue the "ls" command from a cron task running on behalf of the userid:group that you use in apache.

Additionally, are you using suexec? I'm suspect there are other restrictions if you do, maybe.



On 10/02/07, *Steve Pelikan* <pelikan@xxxxxxxxxxx <mailto:pelikan@xxxxxxxxxxx>> wrote:

    We have several perl cgi scripts that run fine with apache 2.0 but fail
    with 2.2. This is using 2.2 that is part of recent Fedora and 2.0.59
    that I just built and installed on the same machine.

    The problem seems to be with system() calls in perl.

    system("ls");  returns an error with version 2.2 but runs w/o error
    with 2.0

    Same with File::Copy copy() function.

    I believe I've made the configurations (httpd.conf) for the two apaches
    the same.

    What am I'm missing?

    Thanks

    Steve P

    ---------------------------------------------------------------------
    The official User-To-User support forum of the Apache HTTP Server
    Project.
    See <URL:http://httpd.apache.org/userslist.html> for more info.
    To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
    <mailto:users-unsubscribe@xxxxxxxxxxxxxxxx>
       "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
    <mailto:users-digest-unsubscribe@xxxxxxxxxxxxxxxx>
    For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
    <mailto:users-help@xxxxxxxxxxxxxxxx>




--
Steve Swift
http://www.swiftys.org.uk


------------------------------------------------------------------------

No virus found in this incoming message.
Checked by AVG Free Edition.
Version: 7.5.441 / Virus Database: 268.17.35/680 - Release Date: 2/10/2007 9:15 PM


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
  "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx


[Index of Archives]     [Open SSH Users]     [Linux ACPI]     [Linux Kernel]     [Linux Laptop]     [Kernel Newbies]     [Security]     [Netfilter]     [Bugtraq]     [Squid]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Samba]     [Video 4 Linux]     [Device Mapper]

  Powered by Linux