[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: [cobalt-developers] cgi-wrap



Can someone help me understand cgi-wrapper the pro/cons please. I know
it allows the cgi program to fun in its own separate area allowing
hackers restricted access from buffer overflows. But are there anymore
pro/cons of using it. 

Also once it is installed all cgi's will use it currect?



-----Original Message-----
From: cobalt-developers-admin@xxxxxxxxxxxxxxx
[mailto:cobalt-developers-admin@xxxxxxxxxxxxxxx] On Behalf Of Ervin
Tarkhanian
Sent: Wednesday, June 27, 2001 11:10 AM
To: cobalt-developers@xxxxxxxxxxxxxxx
Subject: RE: [cobalt-developers] Allowin a .exe file to run for a
specified site?

HI JP,

Thanks for the info, I didn't know that you couldn't run .exe on a linux
box.  For a newbie, that sounds ridiculous, but what do I know.  It's
strange that I could change the file extension from .exe to .cgi and it
works fine.  The only problem I'm having is that html forms are
generated
post to .exe url's, and I can't change that.

I'll look into the AddHandler cgi-wrapper .exe directive.  Thanks again
for
the info.

Best regards,
Ervin Tarkhanian
AVETAR Interactive
818.705.3415 Tel.
818.345.8368 Fax.
ervin@xxxxxxxxxx
www.avetar.com

-----Original Message-----
From: cobalt-developers-admin@xxxxxxxxxxxxxxx
[mailto:cobalt-developers-admin@xxxxxxxxxxxxxxx]On Behalf Of Jonas
Pasche
Sent: Wednesday, June 27, 2001 1:56 AM
To: cobalt-developers@xxxxxxxxxxxxxxx
Subject: Re: [cobalt-developers] Allowin a .exe file to run for a
specified
site?

hi ervin,

>I'm trying to implement a 3rd party cgi application, and all the app
files
>are .exe's.  I need to allow this single site to run .exe's as the
compiled
>files post to .exe only and there's no way for me to change that. Ex:
>
>Step1.exe -> step2.exe  -> step3.exe ....
>
>If I point my browser to the .exe, it asks me to download the file.  I
know
>I could adjust the mime.types file to allow for .exe to run, but I
don't
>want to allow everyone on the entire server to run .exe except for this
>particular site.

you know that you're on a linux platform that doesn't run exe
binaries..?
the only exception i know are the frontpage programs (fpsrvadm.exe, ...)
that have an .exe suffix, but they are ordinary elf binaries.

setting a mime type wouldn't be the solution, i think. you need to set
an
"AddHandler cgi-wrapper .exe" directive within your httpd.conf.

jp.


_____________________________________________________________
Jonas Pasche, RHCE                            Rheinstr. 3
webagentur Domke GmbH                         64283 Darmstadt
Systemadministration / Systementwicklung      Germany

Hotline: 0700 46637243 (24 Pf./Min.)  mailto:jpasche@xxxxxxxx
Telefax: +49 (0)6151 293173               http://www.domke.de
_____________________________________________________________

_______________________________________________
cobalt-developers mailing list
cobalt-developers@xxxxxxxxxxxxxxx
http://list.cobalt.com/mailman/listinfo/cobalt-developers

_______________________________________________
cobalt-developers mailing list
cobalt-developers@xxxxxxxxxxxxxxx
http://list.cobalt.com/mailman/listinfo/cobalt-developers