in reply to Re^2: System and CGI - File Created but not the Content
in thread System and CGI - File Created but not the Content
That explains a lot.
Selinux provides "security contexts", and everything that a webserver may run is in the server's security context.
This means that it is not allowed to do a whole lot of things, even if the file permissions allow it.
Which in turn means that virtually everything can go wrong.
I'd recommend to write a daemon that runs a normal user, validates it input and executes the program. The CGI script and the daemon can communicate via TCP or named pipes.
|
|---|
| Replies are listed 'Best First'. | |
|---|---|
|
Re^4: System and CGI - File Created but not the Content
by monkfan (Curate) on Sep 18, 2007 at 12:37 UTC | |
by moritz (Cardinal) on Sep 18, 2007 at 12:53 UTC | |
by girarde (Hermit) on Sep 18, 2007 at 13:30 UTC |