The Apache Web server that comes with VPS v2 Virtual Server has a
customized suexec module built in. The suexec extension allows your Apache Web
server to run CGI programs with the permissions of a specific user other than”
root” or “www” (the Apache user).
By running CGI programs as a non-privileged user, your
risk of accidental (or intentional) damage (i.e., deleted or altered files,
etc.) is greatly reduced. Potential security issues become limited to only the
files and permissions of the user running the CGI program.
|
