From owner-freebsd-questions Tue Oct 20 03:21:08 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id DAA28546 for freebsd-questions-outgoing; Tue, 20 Oct 1998 03:21:08 -0700 (PDT) (envelope-from owner-freebsd-questions@FreeBSD.ORG) Received: from barney.webace.com.au ([203.25.160.154]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id DAA28537 for ; Tue, 20 Oct 1998 03:21:02 -0700 (PDT) (envelope-from jasonm@webace.com.au) Received: from jason (jason.webace.com.au [203.25.160.112]) by barney.webace.com.au (8.8.8/8.8.8) with SMTP id SAA21385 for ; Tue, 20 Oct 1998 18:43:41 +0800 (WST) (envelope-from jasonm@webace.com.au) Message-Id: <2.2.32.19981020101923.00694cb0@webace.com.au> X-Sender: jasonm@webace.com.au X-Mailer: Windows Eudora Pro Version 2.2 (32) Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Date: Tue, 20 Oct 1998 18:19:23 +0800 To: questions@FreeBSD.ORG From: Jason McKay Subject: CGI Security Questions Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG Hello, A couple of our users want their own CGI directory, therefore I have a couple of quick questions: 1. How do specify more than one cgi-bin directory? 2. I have some worries about security, by default are CGI scripts allowed to exec root only programs? whats to stop a user from uploading a CGI script that can do damage to the system? Thank You, Jason McKay. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message