[SLUG] running ipchains from CGI script

[Nicholas Reese]

HI all,   I want to create a web based interface that allows me to add or delete ipchains (I want to dynamically allow or deny network access to workstations) – I have a simple PERL script in cgi-bin that runs the command to add or delete a chain – the only problem here is that I get “permission denied, you must be root” when I try to run it. I have created a user called apache_user and made it a member of the root group, then changed the ownership of ipchains to apache_user, still no luck. I have checked out suEXEC but this will not allow the ‘root’ group to execute CGI/SSI programs. Any ideas / completely different approaches greatly appreciated.   rgds and TIA   Nick Reese   Linux earns mindshare, Microsoft buys it...