running cgi as root

prinski · 04-09-2004, 05:04 AM

hi,

in my cgi script i need to run the ipsec command which only user root can run. I also need to write to files. At the moment I get permission denied for this.

so i definitely got to run my script as root, i think. What's the simplest solution?

my cgi file has: -rwsr-xr-x
the file i want to write to has: -rw-------

greets,

prinski

ToniT · 04-19-2004, 03:10 AM

Don't run cgi script as root.

Are you sure you have to? How about creating a suid root helper program that does the needed ipsec calls and the cgi script calls this.

alfabetykal · 01-07-2007, 11:43 AM

Quote:

Originally Posted by ToniT

Don't run cgi script as root.

Are you sure you have to? How about creating a suid root helper program that does the needed ipsec calls and the cgi script calls this.

how exactly would you go about doing that? I made a personalized supporting library for IPTables::IPv4 and IPTables::IPv6 perl modules however since the modify iptables rules to the kernel level I can't seem to think of a way other than SUID to actually run the scripts. any ideas?