[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[debian-users:33273] [summary] How to disable suexec of Apache



[質å•]

Apache ã‹ã‚‰ cgi を呼ã³å‡ºã™ã¨ãã«ï¼Œsuexec ã«ã‚ˆã‚‹æ¤œæŸ»ã‚’ã—ãªã„よã†ã«ã™ã‚‹
ã«ã¯ã©ã†ã™ã‚Œã°è‰¯ã„ã§ã™ã‹ï¼Ž

[回答]

以下ã®ã‚ˆã†ã« /usr/lib/apache/suexec を改åã—,apache ã‚’å†èµ·å‹•ã™ã‚‹ï¼Ž

    # dpkg-divert --rename --divert /usr/lib/apache/suexec.apache /usr/lib/apache/suexec
    # /etc/init.d/apache stop
    # /etc/init.d/apache start


>> On Wed, 5 Jun 2002 22:45:55 +0900
>> fuyuneko@xxxxxxxxxxxx (KISE Hiroshi) said as follows:

>> ãã†ã„ã†äº‹æƒ…ãªã®ã§ã™ãŒï¼Œsuexec を使ã‚ãªã„よã†ã«ã™ã‚‹ã«ã¯ã©ã†ã™ã‚Œã°è‰¯ã„
>> ã§ã—ょã†ã‹ï¼Ž

> suexecファイルを消ã™ãªã‚Šåå‰ã‚’変ãˆã‚‹ãªã‚Šã™ã‚‹ã¨ã„ã„ã®ã§ã¯ãªã„ã§ã—ょã†
> ã‹ã€‚ã‹ã£ã“よãã‚ã‚Šã¾ã›ã‚“ãŒã€‚

ãˆã£ã¨ï¼Œä¸Šè¿°ã®ã‚ˆã†ã«æ‰‹å‹•ã§ divert ã—ã¦ã—ã¾ã†ã®ã¯ã©ã†ã§ã—ょã†? ã“ã‚Œãªã‚‰ï¼Œ
apache ãŒæ›´æ–°ã•ã‚Œã¦ã‚‚大丈夫ã ã¨æ€ã†ã‚“ã§ã™ã‘ã©ï¼ŽãªãŠï¼Œå‚™å¿˜éŒ²çš„ã«æ›¸ã„ã¦
ãŠãã¨ï¼Œå…ƒã«æˆ»ã™ã®ã¯ï¼Œ

    # dpkg-divert --remove /usr/lib/apache/suexec

ã§ã™ï¼Ž

ãã‚Œã‹ã‚‰ï¼Œä¸Šã«ã‚‚書ãã¾ã—ãŸã‘ã©ï¼Œapache ã‚’å†èµ·å‹•ã™ã‚‹ã®ãŒå¤§äº‹ã§ã™ï¼Ž
suexec を改åã—ãŸå¾Œã«å†èµ·å‹•ã—ãªã‘ã‚Œã°ï¼Œãã‚Œã¾ã§ã¯å‹•ã„ã¦ã„㟠CGI ã¾ã§å‹•
ã‹ãªããªã‚Šã¾ã™ï¼Ž/var/log/apache/error.log を眺ã‚ã‚‹ã¨ï¼Œ

    [Wed Jun  5 23:37:37 2002] [error] (2)No such file or directory:
    exec of /home/tsuchiya/public_html/namazu.cgi failed
    [Wed Jun  5 23:37:37 2002] [error] [client 127.0.0.1] Premature
    end of script headers: /home/tsuchiya/public_html/namazu.cgi

ã¨ã„ã†ã‚ˆã†ãªè¨˜éŒ²ãŒæ®‹ã£ã¦ã„ã¦ï¼Œã‚„ã£ã±ã‚Š suexec ãŒãªã„ã¨é§„ç›®ãªã‚“ã˜ã‚ƒãªã„
ã®? ã¨ã ã¾ã•ã‚Œãã†ã«ãªã‚Šã¾ã™ã‹ã‚‰ï¼Œè¦æ³¨æ„.

;; ã£ã¦ï¼Œå®Ÿã¯ã ã¾ã•ã‚Œã¦åŠæ—¥ã¯ã¾ã£ã¦ãŸã‚“ã§ã™ã‘ã©ã­ï¼Ž

ã§ã‚‚,ã“ã®æ–¹æ³•ã ã¨ãƒ‡ã‚£ãƒ¬ã‚¯ãƒˆãƒªå˜ä½ã§ suexec を使ã£ãŸã‚Šä½¿ã‚ãªã‹ã£ãŸã‚Šã¨
言ã†åˆ¶å¾¡ãŒå‡ºæ¥ã¾ã›ã‚“ã‹ã‚‰ï¼Œã‚„ã£ã±ã‚Š NoSuExec オプションãŒæ¬²ã—ã„ã§ã™ã‘
ã©â€¦ï¼Ž

アドãƒã‚¤ã‚¹æœ‰ã‚Šé›£ã†ã”ã–ã„ã¾ã—ãŸï¼Ž> 喜瀬ã•ã‚“,æ¾æ°¸ã•ã‚“,ã‹ã‚ãžãˆã•ã‚“.

-- 
土屋 雅稔  ( TSUCHIYA Masatoshi )