You probably want to run suexec which runs cgi as a specific user.
Our project docs --including links to the real docs are here: http://www.communitysoftwarelab.org/sys/project.d/suexec.d/ It is easy if you have not changed DocumentRoot from /var/www On Fri, 3 Oct 2003, Antonin Karasek wrote: > Hi, > I want to enable CGI on my web-hosting server, but I can't find out a good > security model (permitions of files). I don't want files to be readable for > others and don't want CGI to run apache's group. The main problem is, that > the files must belong to the same group as CGI is run. > > The best solution could be to chroot CGI scripts, but Apache can't do this > (I think). > > Could anybody send me some useful links? > > Many thanks > > > -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]