[prev in list] [next in list] [prev in thread] [next in thread] 

List:       apache-httpd-users
Subject:    Re: [users@httpd] SuExec and umask
From:       Scott Lamb <slamb () slamb ! org>
Date:       2002-08-30 6:52:47
[Download RAW message or body]

Werner Schalk wrote:
> Hello,
> 
> when I ran ./configure --help
> I see the option --with-suexec-umask
> but I can't find it anywhere
> in the docs. What does it mean (ok
> should be clear) but what
> are good values for this?

When set, suexec will do a umask(2) system call before execve(2)ing your 
CGI. See "man 2 umask" for details, but the short version is that this 
sets the permissions on any file your CGI creates. (Your CGI can 
override this by calling umask(2) itself.) A reasonable value would be 
077, which means files will not be readable or writable by others. You 
might find more information on those numbers in the "man 2 chmod" or 
"man 1 chmod" manual pages.

-- 
Scott Lamb


---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

[prev in list] [next in list] [prev in thread] [next in thread]