RE: CGI security on a shared web server

From: Jeff Dafoe (jeffd@naphost.com)
Date: 05/29/02


From: "Jeff Dafoe" <jeffd@naphost.com>
To: "George Dinwiddie" <gdinwiddie@min.net>
Date: Wed, 29 May 2002 15:46:54 -0400


> Could you give some recommendations for configuring apache and suEXEC
> in a mass hosting environment? Do you specify User and Group in the
> VirtualHost definitions? Do you specify a different User (with less
> privileges) than the virtual host owner's login User?

        Each virtualhost is individually configured such that suexec executes CGIs
as the user/group that the virtual host owner logs in as.

Jeff



Relevant Pages

  • Re: [users@httpd] Re: cgi-bin stopped working in apache ?! please help SOLVED
    ... so now, when Apache starts, it "includes" the configuration of your new ... (It is the new default because it is now the first defined virtual host in ... terms to ServerAlias and that is what screwed me up. ... So whenever a Virtual Host "needs" a parameter value, and it is not explicitly defined in his own <VirtualHost> section, it will use the default parameter value as defined before the "NameVirtualHost" line. ...
    (Debian-User)
  • Re: Virtual hosting with squirrelmail & apache
    ... > Apache was downloaded when I apt-get installed squirrelmail and setup ... Usually the first virtual host will become the ... allow only connections to the squirrelmail virtualhost over ssl, ...
    (alt.os.linux)
  • Re: Apache virtual host problem Half solved
    ... NameVirtualHost for me on the first line of every VirtualHost then ... You just leave NameVirtualHost for the first Virtual Host ... You scratch my back, I'll scratch yours :-) ...
    (Ubuntu)
  • Re: Apache Virtual Server
    ... You've got a wildcard in every "VirtualHost" declaration. ... The ServerName and ServerAlias directives inside each virtual host is ... And your server would have to have just a single address, ... They've got the same hostname associated with two different IP ...
    (Fedora)
  • Re: Apache virtual host problem Half solved
    ... To stop the warning it is easy in your virtual host you have ... NameVirtualHost for me on the first line of every VirtualHost then ... You just leave NameVirtualHost for the first Virtual Host ...
    (Ubuntu)