| suexec-custom(8) - phpMan
suexec-custom(8) System Manager's Manual suexec-custom(8)
NAME
suexec - Switch User For Exec
SYNOPSIS
suexec -V
This is a customized version that can be configured with config files in
/etc/apache2/suexec.
No other synopsis for usage, because this program is otherwise only used internally by the
Apache HTTP server.
DESCRIPTION
suexec is the "wrapper" support program for the suexec behaviour for the Apache HTTP
server. It is run from within the server automatically to switch the user when an exter‐
nal program has to be run under a different user. For more information about suexec in
general, see the online document `Apache suexec Support' on the HTTP server project's Web
site at http://httpd.apache.org/docs/suexec.html .
This version of suexec reads a config file on every execution. Therefore it is a bit
slower than the standard suexec version from the apache2-suexec package.
CONFIGURATION
If suexec is called by a user with name 'username', it will look into
/etc/apache2/suexec/username for configuration. If the file does not exist, suexec will
abort. By creating several config files, you can allow several different apache run users
to use suexec.
The first line in the file is used as the document root (/var/www in the standard suexec)
and the second line in the file is used as the suffix that is appended to users' home
directories (public_html in standard suexec).
If any of the lines is commented out (with #), suexec will refuse the corresponding type
of request. It is recommended to comment out the userdir suffix if you don't need it.
SECURITY
Do not set the document root to a path that includes users' home directories (like /home
or /var) or directories where users can mount removable media. Doing so would create
local security issues. Suexec does not allow to set the document root to the root direc‐
tory / .
OPTIONS
-V Display the list of compile-time settings used when suexec was built. No other
action is taken.
FILES
/etc/apache2/suexec/www-data
SEE ALSO
apache2(8), /usr/share/doc/apache2/README.Debian.gz, dpkg-statoverride(8)
April 2008 suexec-custom(8)
|