Apache and suexec issue that wont let me run my python script

Carlos Nepomuceno carlosnepomuceno at outlook.com
Tue Jun 4 09:13:24 EDT 2013



> Date: Tue, 4 Jun 2013 05:57:54 -0700
> Subject: Re: Apache and suexec issue that wont let me run my python script
> From: nikos.gr33k at gmail.com
> To: python-list at python.org
> 
> root at nikos [~]# nano /usr/local/apache/conf/httpd.conf
> 
> and altering user nobody to user root.
> 
> root at nikos [~]# service httpd restart
> [Tue Jun 04 15:56:42 2013] [warn] module rpaf_module is already loaded, skipping
> Syntax error on line 175 of /usr/local/apache/conf/httpd.conf:
> Error:\tApache has not been designed to serve pages while\n\trunning as root.  There are known race conditions that\n\twill allow any local user to read any file on the system.\n\tIf you still desire to serve pages as root then\n\tadd -DBIG_SECURITY_HOLE to the CFLAGS env variable\n\tand then rebuild the server.\n\tIt is strongly suggested that you instead modify the User\n\tdirective in your httpd.conf file to list a non-root\n\tuser.\n
> root at nikos [~]#
> 
> What can i do?

You don't need to run httpd as root. In fact it's risky. You can use another user with less privileges to run it like nobody or something else you see fit.

I don't think the suggestion to rebuild the server is good, but I don't know how cPanel works so it's just a guess.


 		 	   		  
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.python.org/pipermail/python-list/attachments/20130604/02118117/attachment.html>


More information about the Python-list mailing list