in reply to CGI and GPG, how are you people doing it?

Ok, here is a bone https://httpd.apache.org/docs/2.2/howto/cgi.html#permissions, more tips linked here
  • Comment on Re: CGI and GPG, how are you people doing it?

Replies are listed 'Best First'.
Re^2: CGI and GPG, how are you people doing it?
by aboboras (Acolyte) on Apr 07, 2015 at 00:46 UTC
    I can make the command line method work with gpg homedir chmod 777, but how unsafe is that?

      Look into suExec or mod_itk or some other method of running your CGI as the user.

      I can make the command line method work with gpg homedir chmod 777, but how unsafe is that?

      What means unsafe?

      chmod 777 says

      rwxrwxrwx (symbolic)
      User: read, write and execute
      Group: read, write and execute
      Others: read, write and execute
      

      Is that unsafe? Are you the only user of this webserver?

      Maybe you want to set up https://httpd.apache.org/docs/2.2/suexec.html

        Yes, it is by definition unsafe. The viewer of the web site is a user of the web server so soon as you expose a CGI program through the web.