Hello,

Speedy itself runs nicely with suidperl without IAMSUID from the command
line in Squeeze - just make a hello world test.pl file and try it a few
times with "time speedy test.pl" and "time suidperl test.pl" befora and
after issuing "chmod u+s test.pl".

For Apache2, you can use the speedycgi with suidperl and even OpenWebmail
in Squeeze.

First, you need to add "AddHandler speedycgi-script .pl" to your site
config for it to work.

Second, you have to remove the "User" and "Group" lines from
/etc/apache2/apache2.conf so that Apache will run as root. This is a big
security risk and it is generally a bad idea - anyone cracking Apache will
have full control on your box instead of a limited no-login no-write user.
On the other side, it will be about 3-5 times faster.

Also, I am attaching a very ugly, untested hack if somebody really needs a
speedy with IAMSUID. It might or might work - as written above, it is not
needed anymore.

Best wishes,
Elmar
--- speedy-cgi-perl-2.22/src/SpeedyMake.pl	2003-10-12 02:45:06.000000000 +0200
+++ temp/src/SpeedyMake.pl	2012-02-17 15:10:04.000000000 +0100
@@ -224,6 +224,7 @@
 	"-DSPEEDY_PROGNAME=\\\"" . $class->my_name_full . "\\\"",
 	"-DSPEEDY_VERSION=\\\"\$(VERSION)\\\"",
 	'-DSPEEDY_' . ($class->am_frontend ? 'FRONTEND' : 'BACKEND'),
+	'-DIAMSUID',
     );
 }
 
apt-get install quilt debhelper libperl-dev apache2-prefork-dev
apt-get source speedy-cgi-perl 
cd speedy-cgi-perl-2.22
patch -p1 <../speedy-cgi-perl-suid-hack.patch
debian/rules clean
debian/rules build
debian/rules binary
cd .. ; ls -la *deb

Reply via email to