[ale] SUEXEC with apache

[greg at turnstep.com]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

> I have a friend for some reason wants to run suexec on his
> web server so he can change the user and group of a certian
> virtual host. I haven't ever seen this before. The first thing
> I thought is this has got to be a security risk. NO? 

No, not if done properly (assuming you are referring to 
Apache's suEXEC support). See:

http://httpd.apache.org/docs/suexec.html

Greg Sabino Mullane
- ----------------------------------------------------------------
/~\ The ASCII
\ / Ribbon Campaign   *greg at turnstep.com*
 X  Against HTML      PGP Key: 0x14964AC8
/ \ Email!            200107141129

-----BEGIN PGP SIGNATURE-----
Comment: http://www.turnstep.com/pgp.html

iQA/AwUBO1BlYbybkGcUlkrIEQLFewCgqVqGgfRw4bfj/2aJy3J
VoBfqbQQAoNkj
FfR0PcO+Oe9B2Twp8jk35lwz
=Ap1E
-----END PGP SIGNATURE-----

--
To unsubscribe: mail majordomo at ale.org with "unsubscribe ale" in message body.