Hi,
_
Background of Problem
At our [1]webhosting cooperative, each website is setup in a virtual
host like this:
ServerName www.livingcosmos.org
ErrorLog /var/log/apache/www.livingcosmo
On Tuesday 12 July 2005 18:31, Terrence Brannon wrote:
>How can we setup our virtual hosts so that each one runs as a specific
>Unix user?
Instead of
User www-data
Group www-data
use
User specific_user
Group specific_user
I don't get
On Tue, 2005-07-12 at 22:31 +, Terrence Brannon wrote:
>At the moment, the sysadmins see no way to run mod_perl such that the
>mod_perl requests can run as a specific user. Unless I can find a way
>to have mod_perl processes for each virtual host run as a specific
>user, we will
>Unfortunately, we have been hit by a [2]uselib() privilege elevation
>exploit. As a result, our sysadmins have decided that any CGI/mod_perl
>process has to run as a specific user instead of as www-data.
I'll admit to not being the best SA or security-minded guy around, so maybe
this
as far as I know, that uselib vulnerability has nothing to do with
mod_perl. it's a kernel exploit. using a different user wont fix the
problem, updating your kernel will. so why not do that?
Enno
On Tue, 12 Jul 2005, Terrence Brannon wrote:
>Unfortunately, we have been hit by a [2]uselib()
Hi all,
I just published the slides of the two mod_perl talks I gave I gave at the 2nd
Italian Perl Workshop on June 2005 (http://www.perl.it/workshop)
- "Building a real web application with HTML::Mason"
http://www.perl.it/documenti/talks/ipw/2005/bepi/mason-eng/img0.html
- "20 things you may n
All,
http://rt.cpan.org/Ticket/Display.html?id=5174
I just got and resolved this.
--
END
What doesn't kill us can only make us stronger.
Nothing is impossible.
Philip M. Gollucci ([
I'm having trouble getting Apache2::Status to display particular information.
(following examples in "practical-mod_perl")
The application menus work but "PerlRequire'd Files" and "Compiled Registry
Scripts" are showing nothing -- other options appear to work fine. I've been
running our scripts
(be sure to run in single-process mode)
On Wednesday 13 July 2005 15:47, Bill Whillers wrote:
> I'm having trouble getting Apache2::Status to display particular
> information. (following examples in "practical-mod_perl")
>
> The application menus work but "PerlRequire'd Files" and "Compiled Reg
