[ILUG] suexec/setgid32 error

John P. Looney valen at tuatha.org
Mon Aug 23 10:00:23 IST 2004


 I really hate suexec. It's one of those examples of secure programming
gone wrong; where it's secure, because people can't usually use it.

 Anyway, I've a perl CGI script I'm trying to run suexec. However, I can't
work out why it's failing. When I strace the httpd process, I see:

[pid 11702] write(3, "[2004-08-23 09:54:03]: uid: (500/wwwuser) gid: (500/500) cmd: awstats.pl\n", 76) = 76
[pid 11702] setgid32(500)               = -1 EPERM (Operation not permitted)
[pid 11702] time([1093251243])          = 1093251243
[pid 11702] write(3, "[2004-08-23 09:54:03]: failed to setgid (500: awstats.pl)\n", 58) = 58

 any ideas how I debug this ? I've put:

wwwuser:x:500:apache

 in /etc/group. I've run "chmod g+s awstats.pl". I can't see anything
wrong, it's just...not working.


John



More information about the ILUG mailing list