Apache suexec and class capabilities

[Marcus Reid]

Hi:

I'd like to subject any CGI run through Apache with suexec to the resource
limitations imposed by login.conf. I see that there is a couple of patches
to this effect included in the apache13-fp port, but they seem to be aimed
at solving a problem with FrontPage extensions (which I'm not going to use.)

Is there a patch floating around, or some way of doing this?

--
Marcus Reid
Blazingdot.com

To Unsubscribe: send mail to majo...@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message

[Blaz Zupan]

> I'd like to subject any CGI run through Apache with suexec to the resource
> limitations imposed by login.conf. I see that there is a couple of patches
> to this effect included in the apache13-fp port, but they seem to be aimed
> at solving a problem with FrontPage extensions (which I'm not going to use.)
>
> Is there a patch floating around, or some way of doing this?

Take a look at this one, it works fine for us:

http://www.FreeBSD.org/cgi/query-pr.cgi?pr=13606

Blaz Zupan, Medinet d.o.o, Linhartova 21, 2000 Maribor, Slovenia
E-mail: bl...@amis.net, Tel: +386-2-320-6320, Fax: +386-2-320-6325

[Scot W. Hetzel]

From: "Blaz Zupan" <bl...@amis.net>

> > I'd like to subject any CGI run through Apache with suexec to the
resource
> > limitations imposed by login.conf. I see that there is a couple of
patches
> > to this effect included in the apache13-fp port, but they seem to be
aimed
> > at solving a problem with FrontPage extensions (which I'm not going to
use.)
> >
> > Is there a patch floating around, or some way of doing this?
>
> Take a look at this one, it works fine for us:
>
> http://www.FreeBSD.org/cgi/query-pr.cgi?pr=13606
>

The above PR is what I used to add the resource limitations to the
apache13-fp port.

You will also need to add "-lutil" to the suexec entry in
src/support/Makefile.tmpl (use patch-ff in apache13-fp).

Scot