in reply to CGI scripts creating files with odd ownerships

That sounds like Apache suEXEC is misconfigured, unless 'nobody' or 'www' has uid 1000. Uid nobody is often 99.

The Apache docs give details, but suEXEC is configured per vhost. There is also a setting in *.conf for the user httpd runs as.

After Compline,
Zaxo

  • Comment on Re: CGI scripts creating files with odd ownerships

Replies are listed 'Best First'.
Re: Re: CGI scripts creating files with odd ownerships
by Matt S Trout (Initiate) on Jun 28, 2001 at 16:22 UTC
    None of the scripts are using suid; the httpd conf file is set to
    User www
    Group www
    but we're still getting the uid 1000 files created.
[reply]

      Ok, next step is to check that user and group 'www' exist on the system (grep www /etc/{passwd,groups} or perl -e 'print getpwnam("www"),$/,getgrnam("www"),$/'). If that turns up no problem, look again for suEXEC setup. It's not the same thing as setting the suid bit on the scripts.  $ httpd -l -L -V will assist in that.

      After Compline,
      Zaxo

[reply]
[d/l]
[select]
        Apache appears to have been compiled with suEXEC theoretically enabled, but the path to the suEXEC wrapper itself set wrong; there are no references to suEXEC config in the .conf files that I can find.

        Am I right in thinking that the solution here is probably to recompile Apache without suEXEC??
[reply]

In Section Seekers of Perl Wisdom