I'm setting up a webserver that uses nfs to access user home 
directories. User information is accessed through an LDAP server and the 
nfs server has root squash enabled for the webserver as a security measure.

Suphp uses setuid root to try and access the requested php script as 
root before it ever tries to execute it as the script owner. So when 
someone wants to run a php script that is located on our nfs server, 
suphp tries to access it first as root and gets root squashed so suphp 
returns a file not found error before it ever even gets a chance to 
execute the php script as the owner.

Our current webserver is running an old hacked suphp that somehow works 
around this issue, but the hacker is neither available for comment, nor 
did he leave his source with us.

Any ideas would be greatly appreciated.

Thanks!
-- 
Drew A. Withers <[EMAIL PROTECTED]>
Assistant CAEDM CSR
Brigham Young University

_______________________________________________
suPHP mailing list
[email protected]
http://lists.marsching.biz/mailman/listinfo/suphp

Reply via email to