Re: Running /usr/bin/osascript via CGI scripts in Mac OS X


Subject: Re: Running /usr/bin/osascript via CGI scripts in Mac OS X
From: nathan r. hruby (nhruby@arches.uga.edu)
Date: Sun Mar 03 2002 - 14:48:04 MST


On Sun, 3 Mar 2002, Zeke Runyon wrote:

> > Is your apache setup using suExec? (look in /var/log/httpd/error_log
> > for
> > the answer) If so, read this:
> > http://httpd.apache.org/docs/suexec.html
>
> It doesn't list any errors while running the script in
> /var/log/httpd/error_log.
>

The startup lines in error_log would tell you if you're running with
suExec compiled in.

> Also, why would I have to run the program as root (using suRoot)? Again,
> the osascript program is readable and executable by everyone!
>

su = switch user Apache can try to switch the process to the owner of the
cgi script which is better for security. Read the suexec page above for
an example.

-n

-- 
......
nathan hruby - nhruby@arches.uga.edu
computer support specialist
department of drama and theatre
http://www.drama.uga.edu/
......



This archive was generated by hypermail 2a24 : Sun Mar 03 2002 - 15:02:52 MST