Enable suEXEC2014/04/30

	Normally, a process owner of CGI performing is the Apache2 admin user, but it's possible to perform CGI scripts with other userID as process owner to enable suEXEC function.
[1]	Enable suEXEC.

root@www:~#

apt-get -y install apache2-suexec-custom

root@www:~#

a2enmod suexec

Enabling module suexec.
To activate the new configuration, you need to run:
  service apache2 restart

root@www:~#

/etc/init.d/apache2 restart

 * Restarting web server apache2
   ...done.

[2]	For example, Configure suEXEC settings with a user "ubuntu" like follows. The environment of virtualhost of this example is the same with here.

root@www:~#

vi /etc/apache2/suexec/www-data

# add to the head of a file: the directory for enabling suEXEC

/home/ubuntu/public_html

/var/www
public_html/cgi-bin

root@www:~#

vi /etc/apache2/sites-enabled/virtual.host.conf

<VirtualHost *:80>
    ServerName www.virtual.host
    ServerAdmin webmaster@virtual.host
    DocumentRoot /home/ubuntu/public_html
    ErrorLog /var/log/apache2/virtual.host.error.log
    CustomLog /var/log/apache2/virtual.host.access.log combined
    LogLevel warn
    # set "ubuntu" user for suEXEC
    SuexecUserGroup ubuntu ubuntu
    <Directory "/home/ubuntu/public_html">
        Options +ExecCGI
        AddHandler cgi-script .cgi .pl
    </Directory>
</VirtualHost>

root@www:~#

/etc/init.d/apache2 restart

 * Restarting web server apache2
   ...done.

[3]	Create a test script which has 700 permission with the user "ubuntu" and make sure it works normally.

ubuntu@www:~$

vi ~/public_html/suexec.cgi

#!/usr/bin/perl

print "Content-type: text/html\n\n";
print "<html>\n<body>\n";
print "<div style=\"width: 100%; font-size: 40px; font-weight: bold; text-align: center;\">\n";
print "suEXEC Test Page";
print "\n</div>\n";
print "</body>\n</html>\n";

ubuntu@www:~$

chmod 700 ~/public_html/suexec.cgi

Matched Content