Securing cgi scripts

2010-01-22 Thread DAve
Good morning all, I have been working on an issue here where I am being asked if we can support letting clients install and run their own CGI scripts on a shared vhost. I have tried sbox and cgiwrap, both which worked, but they cannot stop the one test of reading the /etc/passwd file. Forgive my

Re: Securing cgi scripts

2010-01-22 Thread Matthew Seaman
DAve wrote: Good morning all, I have been working on an issue here where I am being asked if we can support letting clients install and run their own CGI scripts on a shared vhost. I have tried sbox and cgiwrap, both which worked, but they cannot stop the one test of reading the /etc/passwd

Re: Securing cgi scripts

2010-01-22 Thread DAve
Matthew Seaman wrote: DAve wrote: Good morning all, I have been working on an issue here where I am being asked if we can support letting clients install and run their own CGI scripts on a shared vhost. I have tried sbox and cgiwrap, both which worked, but they cannot stop the one test of

Re: Securing cgi scripts

2010-01-22 Thread Nathan Vidican
Check out suExec, (assuming you're using Apache)... Please see: http://httpd.apache.org/docs/1.3/mod/core.html#user and/or http://httpd.apache.org/docs/1.3/suexec.html You can make an entire VirtualHost directive run as a different user/group. -- Nathan Vidican nat...@vidican.com On Fri,

Re: Securing cgi scripts

2010-01-22 Thread Mike Woods
Nathan Vidican wrote: Check out suExec, (assuming you're using Apache)... Please see: http://httpd.apache.org/docs/1.3/mod/core.html#user and/or http://httpd.apache.org/docs/1.3/suexec.html You can make an entire VirtualHost directive run as a different user/group. A more up to date