Ludovic,

I spent some more time today trying to get the Debian version of
BackupPC working for me. I ended up putting it into a virtual host which
has suexec for backuppc user and group. I had to recompile the apache2
package to fix the suexec docroot to allow it to run applications
outside of /var/www. Perhaps my solution will be useful to others.


Recompile Apache2:
      apt-get source apache2
      apt-get build-dep apache2
      cd apache2_2.0.54
      edit debian/rules and change the --suexec-docroot to /
      dpkg-buildpackage -rfakeroot -b
      dpkg -i ../apache2_2.0.54-4_i386.deb
      dpkg -i ../apache2-common_2.0.54-4_i386.deb
      dpkg -i ../apache2-utils_2.0.54-4_i386.deb
      dpkg -i ../apache2-mpm-prefork_2.0.54-4_i386.deb

Disable sgid on index.cgi:
  chmod u-s /usr/share/backuppc/cgi-bin/index.cgi
Fix permissions on cgi-bin:
  chown backuppc:backuppc /usr/share/backuppc/cgi-bin

Modify /etc/backuppc/apache.conf:

<VirtualHost *>
  ServerName backuppc
  SuexecUserGroup backuppc backuppc
  DocumentRoot /usr/share/backuppc/cgi-bin

  Alias /backuppc /usr/share/backuppc/cgi-bin
  <Directory /usr/share/backuppc/cgi-bin>
    AllowOverride None
    Options ExecCGI MultiViews Indexes
    SymLinksIfOwnerMatch IncludesNoExec
    DirectoryIndex index.cgi
    AddHandler cgi-script .cgi

    AuthType Basic
    AuthGroupFile /etc/backuppc/htgroup
    AuthUserFile
    /etc/backuppc/htpasswd
    AuthName "BackupPC admin"
    require valid-user
  </Directory>

</VirtualHost>



William

-- 
Knowmad Services Inc.
http://www.knowmad.com


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to