Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 18 Oct 2001 15:57:50 +0400
From:      "Andrey A. Chernov" <ache@nagual.pp.ru>
To:        Sheldon Hearn <sheldonh@starjuice.net>
Cc:        ports@freebsd.org, arch@freebsd.org
Subject:   Re: HEADS UP: Apache port change from nobody:nogroup to www:www planned
Message-ID:  <20011018155749.A63537@nagual.pp.ru>
In-Reply-To: <28489.1003405698@axl.seasidesoftware.co.za>
References:  <20011018153954.B63215@nagual.pp.ru> <28489.1003405698@axl.seasidesoftware.co.za>

next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, Oct 18, 2001 at 13:48:18 +0200, Sheldon Hearn wrote:
> 
> > I don't attempt to deal with this area or attempt to solve it this way. I
> > issue just _warning_ saying that webmasters which use non-wrapped cgi-bin
> > writes shoud convert their directories to group www after Apache change.
> 
> Well, I still don't see the gain, but it's always difficult to argue
> against changes you don't think are necessary. :-(

The gain is not running Apache with access priviledges it must not have, 
including read access.

Please also note that running non-wrapped write CGI's is not something
illegal but the way officially documented in Apache, so it _will_ happens
from time to time in anycase.

[Really you don't need suexec for single user WWW server, moreover running
suexec is often performance killer.]

-- 
Andrey A. Chernov
http://ache.pp.ru/

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-ports" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20011018155749.A63537>