permissions root suexec

0

Let's see if anyone can help me. I have mounted a server in Debian with Apache2 and with the module suexec and CGI to be able to execute scripts perl via web.

So far so good: the script runs with the user assigned with suexec .

The problem is that I need to execute commands in that script that need root permission, and of course, it says "permission denied". Any ideas?

    
asked by Aitor Ramos Pajares 10.05.2018 в 14:59
source

1 answer

0

One option would be to give setuid permissions to the final executable, so that it runs as root, but with execution permissions for the user suexec or www-data or httpd, but you always have to be careful with the open doors that you are leaving . I want to say that we must always analyze what we receive from the user, to avoid problems.

    
answered by 10.05.2018 в 18:13