Changeset 855

Timestamp:

Oct 28, 2008, 2:00:39 AM (16 years ago)

Author:

andersk

Message:

Make suexec log scripts without execute permission (the group x-bit,
which was copied from the original user x-bit by the AFS patch).

File:

• server/common/patches/httpd-suexec-scripts.patch (modified) (2 diffs)

server/common/patches/httpd-suexec-scripts.patch

@@ -259 +259 @@
          (gid != dir_info.st_gid) ||
          (uid != prg_info.st_uid) ||
-@@ -574,12 +676,14 @@
+@@ -574,14 +676,15 @@
                  prg_info.st_uid, prg_info.st_gid);
          exit(120);
@@ -271 +271 @@
 -    if (!(prg_info.st_mode & S_IXUSR)) {
 +    if (!is_static_extension(cmd) && !is_php_extension(cmd) &&
-+        !(prg_info.st_mode & S_IXUSR)) {
++        !(prg_info.st_mode & S_IXGRP)) {
          log_err("file has no execute permission: (%s/%s)\n", cwd, cmd);
-         exit(121);
-     }
+-        exit(121);
+     }
+ 
+ #ifdef AP_SUEXEC_UMASK
 @@ -606,6 +709,21 @@
        exit(122);