On Tue, 8 Jul 2008, Nick Wiltshire wrote:

> Hi list,
>
> I'm trying to set up suExec with virtual hosts, and I am either going about
> this all wrong, or I have found a bug.
>
> Given the following vhost:
>
> <VirtualHost *:80>
>  SuexecUserGroup example.org example.org

So long as your user is called example.org, thats fine, however the group
should be the user apache runs as


> The virtual hosts will obviously run as their own user, in their home
> directory (/home/tld).
>
> The line in question is the ScriptAlias line. If I use a full path like:
>
> ScriptAlias /php5 /home/example.org/cgi-bin/php
>
> suExec fails saying it's outside of the docroot. I believe this is correct
> behavior, though it would be nice if suExec knew /home/example.org is the
> same as ~
>
> Where it gets buggy is if I have it as in the example:
>
> ScriptAlias /php5 ~/cgi-bin/php
>
> Now suExec is happy, but Apache (incorrectly, IMO) prepends ServerRoot and
> cuts off all but the tilde. PHP scripts throw a 403 and In my log I get:


Why not just set /home as the suexec-docroot Since your allowing
/home/%domains% to use it anyway.


>
> Does anyone know how I can achieve this? I'm running Apache 2.2.9 on a Gentoo
> box.
>
> Thanks,
> Nick
>
> ---------------------------------------------------------------------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See <URL:http://httpd.apache.org/userslist.html> for more info.
> To unsubscribe, e-mail: users-unsubscribe@(protected)
>  "  from the digest: users-digest-unsubscribe@(protected)
> For additional commands, e-mail: users-help@(protected)
>

--
Cheers
Res
 --- Usenet policy, and why I might ignore you ---
1/ GoogleGroups are UDP'd on my nntp server. If you use them, don't
  waste your time or energy replying to me.

2/ If only cleanfeed filtered out trolls as well as spam, usenet would be
  a nicer place.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@(protected)
 "  from the digest: users-digest-unsubscribe@(protected)
For additional commands, e-mail: users-help@(protected)