Bug 183611 - suexec module gets UserDir wrong
suexec module gets UserDir wrong
Status: CLOSED NOTABUG
Product: Fedora
Classification: Fedora
Component: httpd (Show other bugs)
4
All Linux
medium Severity medium
: ---
: ---
Assigned To: Joe Orton
:
Depends On:
Blocks:
  Show dependency treegraph
 
Reported: 2006-03-02 05:25 EST by JW
Modified: 2007-11-30 17:11 EST (History)
0 users

See Also:
Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Environment:
Last Closed: 2006-03-02 07:14:30 EST
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
CRM:
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:


Attachments (Terms of Use)

  None (edit)
Description JW 2006-03-02 05:25:43 EST
From Bugzilla Helper:
User-Agent: Mozilla/5.0 (compatible; MSIE 6.0; Windows; U; AIIEEEE!; Win98; Windows 98; en-US; Gecko masquerading as IE; should it matter?; rv:1.8b) Gecko/20050217

Description of problem:
If httpd config UserDir is set to anything other than "public_html" the suexec module still looks for "public_html".


Version-Release number of selected component (if applicable):
httpd-2.0.54-10.2

How reproducible:
Always

Steps to Reproduce:
1.Configure httpd.conf with "UserDir WWW"
2.Configure a user ~/WWW/cgi-bin directory
3.Ensure httpd.conf has:
<Directory /home/*/WWW/cgi-bin/>
    Options ExecCGI
    SetHandler cgi-script
</Directory>
4. Execute cgi with browser: "http:/HOST/~USER/cgi-bin/whatever"



Actual Results:  In /var/log/http/suexec.log we get:
     cannot get docroot information (/home/USER)


Expected Results:  It should work


Additional info:

If you create a ~USER/public_html which is a symlink to ~USER/WWW then suexec will work.

Also suexec doesn't have non-compile-time options, and it also doesn't communicate with httpd properly so as to get correct UserDir.
Comment 1 Joe Orton 2006-03-02 07:14:30 EST
That is how the suexec security model works: if you need to change the userdir
name you need to compile a custom suexec binary.

http://httpd.apache.org/docs/2.0/suexec.html#model

Note You need to log in before you can comment on or make changes to this bug.