[users@httpd] suexec and shared binaries

[Sven Karlsson]

Hello,

I'm setting up a hosting site with virtual domains, and to increase security I intend to run suexec'd php and cgi's.

I'd also like to keep redundancy to a minimum; i.e. only one copy of php in /usr/lib/cgi-bin  . If I need to upgrade php, I'd like to do it in one place, not messing with users cgi-bin directories.

Now, suexec requires that both the cgi (in this case php) and its directory is owned by the vhost owner/uid, otherwise it refuses to execute.

So my question is, is there some way of having a "shared" cgi-bin where suexec does not care about the file owner, or perhaps accepts one uid (a "sharedcgi" user) as owner.

Of course, the source can be modified, but the documentation strongly advices against this... so if there is some other solution, I'm all ears!

Thanks,
 Sven