oops!, I never worked with threads before, and I'm not dooing , I just wrote a module 
...
So this is my problem:
        My module translates the request to a directory, for virtual hosting porpouses.
        But the problem is that i need to change the user Id as well, so interpreters 
running as
modules (as php, perl)  and cgi runs on that one. 
        All the translations must be done based on tables that I have in a file.

Is the only solution to build an MPM ? like perchild ?
But here it arraises another problem, I have to switch to the thread is answering for 
the website after
the server process the request, because I dont�t have the URL earlier ? do I ? so this 
is after the mpm, doesn' it ?
example: I need to answer an ssl request, I will know the URL after the MPM (is this 
correct?) process it, so
this is the first time i know which user id to switch to.

Pablo



On Monday 16 June 2003 04:16 pm, Cliff Woolley wrote:
> On Mon, 16 Jun 2003, Pablo Yaggi wrote:
> > Yes, my worker does, because I'm running apache as root
> > (BIG_SECURITY_HOLE) enabled, because my module drops down to less
> > priveleged user id. So maybe the fact I change the userid
> > (real) and it never come back to root is the problem.
>
> Wait a minute... so you're calling setuid() from within a module on
> the child process of a threaded MPM?  That's not good... threads don't
> have independent uid's; if any one thread changes the uid of the process,
> it would affect all threads in that process.
>
> --Cliff

Reply via email to