From owner-freebsd-questions  Wed Aug  9 11:12:25 2000
Delivered-To: freebsd-questions@freebsd.org
Received: from diskfarm.firehouse.net (rdu25-12-043.nc.rr.com [24.25.12.43])
	by hub.freebsd.org (Postfix) with ESMTP id CB60937BDEB
	for <questions@FreeBSD.ORG>; Wed,  9 Aug 2000 11:12:12 -0700 (PDT)
	(envelope-from abc@diskfarm.firehouse.net)
Received: (from abc@localhost)
	by diskfarm.firehouse.net (8.9.3/8.9.3) id OAA63622;
	Wed, 9 Aug 2000 14:17:38 GMT
	(envelope-from abc)
Date: Wed, 9 Aug 2000 14:17:38 +0000
From: Alan Clegg <abc@bsdi.com>
To: Artem Koutchine <matrix@ipform.ru>
Cc: questions@FreeBSD.ORG
Subject: Re: NGROUPS_MAX (apache in too many groups)
Message-ID: <20000809141738.C59189@diskfarm.firehouse.net>
References: <000e01c0022b$afef03a0$0c00a8c0@ipform.ru>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.2.4i
In-Reply-To: <000e01c0022b$afef03a0$0c00a8c0@ipform.ru>; from matrix@ipform.ru on Wed, Aug 09, 2000 at 10:00:20PM +0400
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

Out of the ether, Artem Koutchine spewed forth the following bitstream:

> Let me begin from afar. I am running apache with suEXEC
> and using a very strict permission model, so no owner of
> a virtual server can peek into others' directories.

Fine.  Make each person a different UID, but the same GID, ie, "www"
Then, apache can run suEXEC as the correct UID and all under the same
GID.

Problem solved without breaking the system.

AlanC


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message