Hi. I'm looking for some help with using suexec and userdir (2.2.15 on FC11).
I have this test script running in a userdir (~test44/public_html/test.php):
<?php system('whoami'); ?>
And it keeps reporting apache, not test44.
Suexec is enabled, as shown in error log file.
Per the documentation (http://httpd.apache.org/docs/2.2/suexec.html):
"The only requirement needed for this feature to work is for CGI
execution to be enabled for the user and that the script must meet the
scrutiny of the security checks above."
When I access the test page, no errors are logged to the suexec.log
file, so it doesn't seem to be failing the security checks.
So either CGI execution is not enabled for users (how does one enable
that?), or else it's something else completely I'm missing.
I'll be glad to feel dumb in someone can tell me what it is! :) TIA!
Ken Tanzer
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
" from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
|