SPUG: generating output with a cgi script

[Richard Anderson]

Not always.  If your webmaster has configured the Apache setuid module, any
CGI process the server starts will be owned by the owner of the CGI script.
So the CGI process can read a file that is owned by your userid and has no
group or world permissions.  This is the way that most enlightened ISPs
configure Apache.  (But not NW Nexus, which is why I am no longer one of
their customers.)

Richard.Anderson at raycosoft.com
www.zipcon.net/~starfire/home (personal)
www.raycosoft.com (corporate)
----- Original Message -----
From: "Meryll Larkin" <meryll at is2inc.com>
To: "Wu, Yaoxi" <yaoxi.wu at attws.com>
Cc: <spug-list at pm.org>
Sent: Monday, October 02, 2000 3:40 PM
Subject: Re: SPUG: generating output with a cgi script


>
>
> "Wu, Yaoxi" wrote:
> >
> > Modifying the file permission solved the
> > problem. Does this mean that every data file to be accessd by the server
> > must be owned by "nobody" or "world-readable"?
> >
> YES!!!
>
>
>  - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
> >      POST TO: spug-list at pm.org       PROBLEMS: owner-spug-list at pm.org
> >       Subscriptions; Email to majordomo at pm.org:  ACTION  LIST  EMAIL
> >   Replace ACTION by subscribe or unsubscribe, EMAIL by your
Email-address
> >  For daily traffic, use spug-list for LIST ;  for weekly,
spug-list-digest
> >   Seattle Perl Users Group (SPUG) Home Page:
http://www.halcyon.com/spug/
>
> --
> Meryll Larkin                 IS Squared, Inc.
> meryll at is2inc.com             3400 188th St SW  suite 500
> (425) 775-6495                Lynnwood WA  98037
> Fax: (425) 774-8564
>
>  - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
>      POST TO: spug-list at pm.org       PROBLEMS: owner-spug-list at pm.org
>       Subscriptions; Email to majordomo at pm.org:  ACTION  LIST  EMAIL
>   Replace ACTION by subscribe or unsubscribe, EMAIL by your Email-address
>  For daily traffic, use spug-list for LIST ;  for weekly, spug-list-digest
>   Seattle Perl Users Group (SPUG) Home Page: http://www.halcyon.com/spug/
>
>
>


 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
     POST TO: spug-list at pm.org       PROBLEMS: owner-spug-list at pm.org
      Subscriptions; Email to majordomo at pm.org:  ACTION  LIST  EMAIL
  Replace ACTION by subscribe or unsubscribe, EMAIL by your Email-address
 For daily traffic, use spug-list for LIST ;  for weekly, spug-list-digest
  Seattle Perl Users Group (SPUG) Home Page: http://www.halcyon.com/spug/