> It is automatic with suexec. Only you have to enable suexec by setting > suexec setuid.
hrm, i thought i tried that and it didn't work. regardless, if you know how then that's the main thing :) > Unfortunately with apache, data is always served as www-data.www-data or > whatever it is set to in httpd.conf. It does not change uids to serve > normal files, since that would need running as root. It does that for > cgi-s since that inherently needs a program execution itself... hrm, that probably makes sense. > No. I would add www-data to the user's group. That way it can see the > user's file, and it need not be world-readable. However it did not work. > But maybe only because I did not restart apache, and it did not have the > user's group among its groups. yes, you would probably need to restart apache for the new group ownership to take effect. adam.
