On Thu, 2004-03-25 at 02:45, ep wrote: > > solution: make qmailadmin setuid root
> hi, thanks for the response. i'm still having trouble with this. how > exactly do I make qmailadmin setuid root? chmod 4711 qmailadmin > is it something i have to do > at compile time? it might be a ./configure option, but manually modifying the permissions is ok. > right now, qmailadmin is located in my web server's > cgi-bin and is chown root.root and chmod 6755. apache runs as > nobody/nobody. ok > i created a tiny php script in the same cgi-bin to > setuid root and then display the current uid. depending entirely on your configuration, php scripts are probably not executed as cgi, and therefore setuid bit doesn't matter. They're probably interpreted by mod_php. > my apache has suexec, but no User/Group directives in > the VirtualHost part suexec might complicate things. You are now beyond scope of this mailing list. > so it defaults to running scripts as > nobody/nobody. php scripts, yes, because they're not likely executed as cgi programs. In which case they probably wouldn't be run setuid anyway. -Jeremy -- Jeremy Kitchen Systems Administrator [EMAIL PROTECTED] Kitchen @ #qmail on EFNet - Join the party! ..................... Inter7 Internet Technologies, Inc. www.inter7.com 866.528.3530 toll free 847.492.0470 int'l 847.492.0632 fax GNUPG key ID: 93BDD6CE
