From owner-freebsd-bugs  Thu Mar 27 19:06:54 1997
Return-Path: <owner-bugs>
Received: (from root@localhost)
          by freefall.freebsd.org (8.8.5/8.8.5) id TAA14718
          for bugs-outgoing; Thu, 27 Mar 1997 19:06:54 -0800 (PST)
Received: from sui.gda.itesm.mx (sui.gda.itesm.mx [132.254.53.124])
          by freefall.freebsd.org (8.8.5/8.8.5) with ESMTP id TAA14698;
          Thu, 27 Mar 1997 19:06:47 -0800 (PST)
Received: from rebi (dialup02.i-set.com.mx [200.34.46.132])
	by sui.gda.itesm.mx (8.8.5/8.8.5) with ESMTP id VAA16646;
	Thu, 27 Mar 1997 21:10:01 -0600 (CST)
Message-ID: <333B35DA.2BF3@sui.gda.itesm.mx>
Date: Thu, 27 Mar 1997 21:07:06 -0600
From: "Alejandro Vázquez C." <alexv@sui.gda.itesm.mx>
Organization: SUI - ITESM Campus Guadalajara
X-Mailer: Mozilla 4.0b2 (Win95; I)
MIME-Version: 1.0
Newsgroups: comp.unix.bsd.freebsd.misc
To: freebsd-bugs@freebsd.org, freebsd-security@freebsd.org,
        Alejandro Vazquez <alexv@sui.gda.itesm.mx>,
        Carlos Mercado <cmercado@interface.com.mx>
Subject: SetUID & Apache in 2.2-RELEASE...
X-Priority: 3 (Normal)
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset=us-ascii
Sender: owner-bugs@freebsd.org
X-Loop: FreeBSD.org
Precedence: bulk

 I used to have some setuids CGIs running with my 2.1.5 fbsdbox, and
them executed pretty well with Apache 1.1.1 & Perl 5.002.

Now, I upgraded to 2.2-RELEASE, Apache 1.2b7 & Perl 5.003, and none of
the setuids cgis run (being executed  by anybody but root). When I
remove from them the setuid flag, they can be executed (but I need to
execute them as setuids). Any Ideas? Thanx in advance...