Bugzilla will be upgraded to version 5.0. The upgrade date is tentatively scheduled for 2 December 2018, pending final testing and feedback.
Bug 183611 - suexec module gets UserDir wrong
suexec module gets UserDir wrong
Product: Fedora
Classification: Fedora
Component: httpd (Show other bugs)
All Linux
medium Severity medium
: ---
: ---
Assigned To: Joe Orton
Depends On:
  Show dependency treegraph
Reported: 2006-03-02 05:25 EST by JW
Modified: 2007-11-30 17:11 EST (History)
0 users

See Also:
Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Last Closed: 2006-03-02 07:14:30 EST
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---

Attachments (Terms of Use)

  None (edit)
Description JW 2006-03-02 05:25:43 EST
From Bugzilla Helper:
User-Agent: Mozilla/5.0 (compatible; MSIE 6.0; Windows; U; AIIEEEE!; Win98; Windows 98; en-US; Gecko masquerading as IE; should it matter?; rv:1.8b) Gecko/20050217

Description of problem:
If httpd config UserDir is set to anything other than "public_html" the suexec module still looks for "public_html".

Version-Release number of selected component (if applicable):

How reproducible:

Steps to Reproduce:
1.Configure httpd.conf with "UserDir WWW"
2.Configure a user ~/WWW/cgi-bin directory
3.Ensure httpd.conf has:
<Directory /home/*/WWW/cgi-bin/>
    Options ExecCGI
    SetHandler cgi-script
4. Execute cgi with browser: "http:/HOST/~USER/cgi-bin/whatever"

Actual Results:  In /var/log/http/suexec.log we get:
     cannot get docroot information (/home/USER)

Expected Results:  It should work

Additional info:

If you create a ~USER/public_html which is a symlink to ~USER/WWW then suexec will work.

Also suexec doesn't have non-compile-time options, and it also doesn't communicate with httpd properly so as to get correct UserDir.
Comment 1 Joe Orton 2006-03-02 07:14:30 EST
That is how the suexec security model works: if you need to change the userdir
name you need to compile a custom suexec binary.


Note You need to log in before you can comment on or make changes to this bug.