Bug 183611 - suexec module gets UserDir wrong
Summary: suexec module gets UserDir wrong
Alias: None
Product: Fedora
Classification: Fedora
Component: httpd (Show other bugs)
(Show other bugs)
Version: 4
Hardware: All Linux
Target Milestone: ---
Assignee: Joe Orton
QA Contact:
Depends On:
TreeView+ depends on / blocked
Reported: 2006-03-02 10:25 UTC by JW
Modified: 2007-11-30 22:11 UTC (History)
0 users

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Last Closed: 2006-03-02 12:14:30 UTC
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---

Attachments (Terms of Use)

Description JW 2006-03-02 10:25:43 UTC
From Bugzilla Helper:
User-Agent: Mozilla/5.0 (compatible; MSIE 6.0; Windows; U; AIIEEEE!; Win98; Windows 98; en-US; Gecko masquerading as IE; should it matter?; rv:1.8b) Gecko/20050217

Description of problem:
If httpd config UserDir is set to anything other than "public_html" the suexec module still looks for "public_html".

Version-Release number of selected component (if applicable):

How reproducible:

Steps to Reproduce:
1.Configure httpd.conf with "UserDir WWW"
2.Configure a user ~/WWW/cgi-bin directory
3.Ensure httpd.conf has:
<Directory /home/*/WWW/cgi-bin/>
    Options ExecCGI
    SetHandler cgi-script
4. Execute cgi with browser: "http:/HOST/~USER/cgi-bin/whatever"

Actual Results:  In /var/log/http/suexec.log we get:
     cannot get docroot information (/home/USER)

Expected Results:  It should work

Additional info:

If you create a ~USER/public_html which is a symlink to ~USER/WWW then suexec will work.

Also suexec doesn't have non-compile-time options, and it also doesn't communicate with httpd properly so as to get correct UserDir.

Comment 1 Joe Orton 2006-03-02 12:14:30 UTC
That is how the suexec security model works: if you need to change the userdir
name you need to compile a custom suexec binary.


Note You need to log in before you can comment on or make changes to this bug.