<?xml version="1.0" encoding="windows-1252"?>
<node id="228821" title="Re: Privilege elevation" created="2003-01-21 15:11:52" updated="2005-08-15 16:56:31">
<type id="11">
note</type>
<author id="61400">
joeface</author>
<data>
<field name="doctext">
&lt;P&gt;
If you're running Apache, check out &lt;A HREF="http://httpd.apache.org/docs/suexec.html"&gt;suexec&lt;/A&gt;. It allows the "apache" user to execute CGIs that are owned by another user, as if Apache were su-ing to that user just to run the CGI script.
&lt;/P&gt; 

&lt;P&gt;
It requires that you have Apache set up to recognize an html directory for each user (/home/userFoo/public_html, or the like), and a cgi directory for each user.  The users can access that directory by going to your URL, but with ~username at the end:&lt;BR&gt;
&lt;BR&gt;
http://www.yourdomain.com/~userFoo/cgi-bin/saConfig.cgi&lt;BR&gt;
&lt;/P&gt;
&lt;P&gt;
There are some rather strict requirements for suexec to work. They're listed in the suexec page ref'd above.
&lt;/P&gt;
Cheers,&lt;BR&gt;
Joe</field>
<field name="root_node">
228534</field>
<field name="parent_node">
228534</field>
</data>
</node>
