>Number:         3950
>Category:       mod_cgi
>Synopsis:       CGI programs run don't run with the server's gid
>Confidential:   no
>Severity:       non-critical
>Priority:       medium
>Responsible:    apache
>State:          open
>Class:          sw-bug
>Submitter-Id:   apache
>Arrival-Date:   Tue Feb 23 07:10:00 PST 1999
>Last-Modified:
>Originator:     [EMAIL PROTECTED]
>Organization:
apache
>Release:        1.3.1
>Environment:
Solaris 2.5.1, gcc
compiled with FastCGI and SSL support
>Description:

Bug report 3784 looks like it is another symptom of the same problem.

Although apache itself is running with group www as specified with a
group directive in the config file, CGI programs seem to run as the group
that was in effect when the server was launched.

I'm seeing this with mod_fcgi programs, but I suspect that this is not
the only module with this issue.
>How-To-Repeat:
Configure apache with a group directive, set your group to another gid, and
start apache.  Use ps to examine the gid of the running processes.  This is
particularly simple with mod_fcgi since the fcgi programs stay running after
the current request is done.
>Fix:
I can just set my group id before starting apache, but this is just a
workaround, not a fix.
>Audit-Trail:
>Unformatted:
[In order for any reply to be added to the PR database, ]
[you need to include <[EMAIL PROTECTED]> in the Cc line ]
[and leave the subject line UNCHANGED.  This is not done]
[automatically because of the potential for mail loops. ]
[If you do not include this Cc, your reply may be ig-   ]
[nored unless you are responding to an explicit request ]
[from a developer.                                      ]
[Reply only with text; DO NOT SEND ATTACHMENTS!         ]



Reply via email to