IMO suexec would be better suited to handle more sensitive operations
such as unmounting.
CGI is not an interactive shell, as you discovered.
Calling a separate script with the suid bit might work too.
But I don't need an interactive shell: I need a way to run a script as
user www-data,
On Tue, Jan 23, 2024 at 2:12 PM EML wrote:
>
> Let's take a step back - why are you unmounting from a cgi script?
>
> It's a one-time setup when a user configures a new system. Most of these
> users aren't shell-literate, so they configure by ticking boxes on a web
> page. The system is a VPS, so
Let's take a step back - why are you unmounting from a cgi script?
It's a one-time setup when a user configures a new system. Most of these
users aren't shell-literate, so they configure by ticking boxes on a web
page. The system is a VPS, so is actually a VM, which I hope isn't relevant.
On Tue, Jan 23, 2024 at 2:02 PM EML wrote:
> The CGI Howto page contains some basic information on how Apache actually
> runs a program, but is there any more detailed information anywhere?
>
> Specifically, I have a problem where a bash script runs as expected when
> run from an interactive shel
The CGI Howto page contains some basic information on how Apache
actually runs a program, but is there any more detailed information
anywhere?
Specifically, I have a problem where a bash script runs as expected when
run from an interactive shell by user www-data (this is Ubuntu).
However, the
On Tue, Jan 23, 2024 at 5:22 PM Yann Ylavic wrote:
>
> On Tue, Jan 23, 2024 at 11:55 AM Erik Thuning wrote:
> >
> > I have a tomcat application running that accepts websockets. In front of
> > this application I'm running apache as a reverse proxy. SSL is
> > configured in apache, and my tomcat k
On Tue, Jan 23, 2024 at 11:55 AM Erik Thuning wrote:
>
> I have a tomcat application running that accepts websockets. In front of
> this application I'm running apache as a reverse proxy. SSL is
> configured in apache, and my tomcat knows nothing about SSL.
>
> In the usual web traffic case, every
Hi!
I have a tomcat application running that accepts websockets. In front of
this application I'm running apache as a reverse proxy. SSL is
configured in apache, and my tomcat knows nothing about SSL.
In the usual web traffic case, everything works just as expected - the
SSL connection termi
