|
Virtual
Servers now include secure CGI execution.
Virtual
Hosting clients CGI scripts run with their unique UID, disallowing them
access to the Virtual Server filesystem.
You can
now safely give your clients cgi-bin access and not have to worry about
them compromising the security of the system.
One way
to use Secure-CGI is through the User and Group directives in VirtualHost
definitions. By setting these directives
to values different from the main server user ID, all requests
for CGI resources will be executed as the User and Group
defined for that. If only one or neither of these directives are
specified for a then the main server userid is assumed.
Example
httpd.conf file:
# clientname.com Virtual
Host
# SecureCGI Enabled
<VirtualHost clientname.com>
ServerName clientname.com
User vhost
Group vhost
DocumentRoot /www/htdocs/clientname
TransferLog /www/htdocs/clientname/logs/access_log
ErrorLog /www/htdocs/clientname/logs/error_log
ServerAdmin webmaster@clientname.com
</VirtualHost>
The
above Virtual Host configuration will enable Secure Execution of CGI
scripts within the clientname.com domain.
|