LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - General (https://www.linuxquestions.org/questions/linux-general-1/)
-   -   apache v2.0.44 + cgi ; securing cgi-support in apache (https://www.linuxquestions.org/questions/linux-general-1/apache-v2-0-44-cgi-%3B-securing-cgi-support-in-apache-42166/)

markus1982 01-20-2003 01:03 PM

apache v2.0.44 + cgi ; securing cgi-support in apache
 
Is it possible to secure cgi in Apache v2.0.44 so that things like:

Code:

#!/bin/sh

echo Content-Type: text/plain
echo

cat /etc/passwd

simply don't work ?
I would like to restrict it to open only FILES IT OWNS and nothing else ... well the ideal situation would be setting a path on a virtual host basis where files could be accessed ... everything not being in that base path couldn't be accessed. Like path in the virtual host would be

/server/http/htdocs/www.example.com

and then files in the subpath of example.com can be accessed ... like for instance

/server/http/htdocs/www.example.com/example-dir/example-2ndsubdir/...

but files residing in

/server/http/htdocs/www.example.org

can't be accessed ...


Anybody has some kind of solution, hints, etc ?


All times are GMT -5. The time now is 06:38 PM.