From owner-freebsd-isp  Thu Aug 22 05:24:48 1996
Return-Path: owner-isp
Received: (from root@localhost)
          by freefall.freebsd.org (8.7.5/8.7.3) id FAA10184
          for isp-outgoing; Thu, 22 Aug 1996 05:24:48 -0700 (PDT)
Received: from mp.aha.ru (mp.aha.ru [194.135.22.36])
          by freefall.freebsd.org (8.7.5/8.7.3) with SMTP id FAA10178
          for <freebsd-isp@freebsd.org>; Thu, 22 Aug 1996 05:24:40 -0700 (PDT)
Received: by mp.aha.ru id QAA19176;
  (8.6.11/vak/1.8e) Thu, 22 Aug 1996 16:20:40 +0400
From: bvt@mp.aha.ru (Boris Tyshkiewitch)
Message-Id: <199608221220.QAA19176@mp.aha.ru>
Subject: Re: Weird Apache problem
To: ulf@Lamb.net (Ulf Zimmermann)
Date: Thu, 22 Aug 1996 16:20:39 +0400 (MSD)
Cc: ian@gamespot.com, freebsd-isp@freebsd.org
In-Reply-To: <199608202247.PAA23305@Gatekeeper.Lamb.net> from "Ulf Zimmermann" at Aug 20, 96 03:47:40 pm
X-Mailer: ELM [version 2.4 PL24alpha5]
MIME-Version: 1.0
Content-Type: text/plain; charset=KOI8-R
Content-Transfer-Encoding: 8bit
Sender: owner-isp@freebsd.org
X-Loop: FreeBSD.org
Precedence: bulk

> > > As you see I have 1 CGI, 1 external program and 1 ECHO. If I know access
> > > this via http://server/ulf/index.html, the server executes the ECHO and
> > > don't allow the CGI and external program. It gives a message like
> > > "An error occured while executing this directive"
> > > 
> > > But now, if I access this page via http://server/~ulf/index.html it executes
> > > everything regardless of "Option IncludeNOEXEC". Has anyone seens this too?
> > 
> > I don't run user home pages but I'll venture a guess:
> > 
> > You are setting NOEXEC for /usr/local/www/data but is your home 
> > directory under that directory tree? ~ulf/public_html is probably not 
> > covered by this diretive.



  btw, some days ago I patch mod_userdir.c for setuid to specified user. 
Restore uid to root I done in logger handler.  5 line of code.  Works fine.


Boris.