[SOLVED] iptables and tc permissions in apache2

systemlordanubis · 07-26-2010, 08:59 AM

Hi All,

I'm needing to allow apache2 to make modifications to iptables and tc based on my cgi scripts. How can I allow apache2 to interact with these and only these commands?

Additionally, I want apache to be able to read and write files to a specific folder on the disc; what permissions are required for this also?

Currently I am getting this error when calling /sbin/iptables

Insecure $ENV{PATH} while running with -T switch

Thanks
Anubis.

unSpawn · 07-26-2010, 01:11 PM

Quote:

Originally Posted by systemlordanubis

allow apache2 to make modifications to iptables and tc based on my cgi scripts.

tc and Netfilter require root privileges. Apache doesn't have those. An explicit Sudo line could help.

Quote:

Originally Posted by systemlordanubis

I want apache to be able to read and write files to a specific folder on the disc; what permissions are required for this also?

Please be specific: which directory, which files and who owns them?

Quote:

Originally Posted by systemlordanubis

Insecure $ENV{PATH} while running with -T switch

That error message was already being handled in your http://www.linuxquestions.org/questi...ndomly-821118/ thread, wasn't it?

systemlordanubis · 08-01-2010, 10:03 PM

Hi unSpawn,

Thanks for the reply. I've successfully configured sudoers to allow apache to have access to iptables and tc as well as the files in question.

Thanks for the help.
Anubis.