[svlug] apache file permission wierdness

[Dagmar d'Surreal]

On Thu, 15 Mar 2001, Tim Pepper wrote:

> I'm having some trouble with apache (running as nobody user and group)
> when it comes to executing some cgi scripts and I'm really stumped as to why
> this would be.  I'd really appreciate if anybody might have some insight as to
> what is happening...
> 
> It's a bit convoluted scenario.
> 
> My user is in the group foogroup.  I (tpepper) own a file test.cgi whose
> ownership is tpepper.foogroup and permissions 750.  The nobody account has
> been added to foogroup under the expectation that it gain access to run the
> file via the group permission.  This does not work though...the script is not
> executed.
> 
> The web server is able to execute scripts...same file same directory with
> tpepper.tpepper ownership and mode o+rx set executes as expected.  A simple
> perl script outputting $< $> $( and $) shows that when the web server runs the
> script:

Apache only takes on the uid and gid you specify.  It does not log in as
those, hence it does not get the extra group permission you're trying to
specify.

Have you considered just using suexec?  Makes things a lot easier for
me...