[Wellington-pm] perl-suid deprecated, in favour of what?
LRW at clear.net.nz
Tue May 23 18:03:23 PDT 2006
Thanks Sam, I'll check that out. Even though I'm stubbornly trying to
make my script work without suid, there are other affected scripts which
will eventually need to be fixed too.
On Wed, 2006-05-24 at 12:15 +1200, Sam Vilain wrote:
> I know this issue is already mostly gone, but the FastCGI module for
> Apache has not succumed to this notion that "suid is just bad, m'kay?".
> So long as you haven't tied your application to the Apache API, it's a
> fairly easy switch. See FastCGISuExec in the mod_fastcgi manual page.
> Unlike mod_perl, with fastcgi you can get high performance without
> depending on a specific webserver with notoriously fragile configuration
> method, and without sacrificing the security of unix user seperation.
More information about the Wellington-pm