The following reply was made to PR suexec/3342; it has been noted by GNATS.
From: Marc Slemko <[EMAIL PROTECTED]>
To: Aaron Schlesinger <[EMAIL PROTECTED]>
Cc: Apache bugs database <[EMAIL PROTECTED]>
Subject: Re: suexec/3342: suEXEC compiles but does not wrap cgi's
Date: Thu, 5 Nov 1998 09:18:50 -0800 (PST)
On Thu, 5 Nov 1998, Aaron Schlesinger wrote:
> Try that link again, it should work. It links to a shell script which
> prints:
> I am `whoami`.
No, it now gives a server error:
500 - Misconfiguration
Today's Date and Time: Thursday, 05-Nov-1998 12:19:18 EST
There has been an error or misconfiguration was encountered while
attempting to complete your request.
The file /usr/local/apache/share/htdocs/12345/./test.cgi returned an
error. Please contact [EMAIL PROTECTED] if you feel there is a
mistake or if you'd like to report this incident.
Is there really a ~12345 user in your passwd file with a home
directory of /usr/local/apache/share/htdocs/12345/./ ?
Are you sure the /./ isn't causing problems?
What is your UserDir directive set to?
> Since we run our server as root for certain business related reasons,
There are no valid "business related reasons" to run your server as root.
That is not a supported configuration and is not secure in any way.