RE: [cobalt-users] CGI Wrap error - who should be owner

["Todd Kirk" <tkirk@xxxxxxxxxxxxxx>]

Thanks for the info, I have gone through the archives to harden the formmail
cgi. Question though, I am running formmail as a global CGI what user should
own it then? The server admin user?



regards,

Todd Kirk

-----Original Message-----
From: cobalt-users-admin@xxxxxxxxxxxxxxx
[mailto:cobalt-users-admin@xxxxxxxxxxxxxxx]On Behalf Of Hendrik Runte
Sent: Monday, 21 May 2001 5:25 PM
To: cobalt-users@xxxxxxxxxxxxxxx
Subject: Re: [cobalt-users] CGI Wrap error - who should be owner

> Hi All,
> I have deleted a webmail user and since my formail cgi has stopped
working.
> I have 'chown' this cgi to my admin user. My questions are
>
> 1. Who should be the owner of this file, the error ?
> 2. What CHMOD settings should this CGI have, 755?
> 3. Is the Cobalt apache user called 'nobody'? (Is this the default)
> 4. Why did my CGIWrap error say "the user (nobody) does not have
permission
> to execute the script?
> 5.
>
>
>
> regards,
>
> Todd Kirk
>
>
>
> _______________________________________________
> cobalt-users mailing list
> cobalt-users@xxxxxxxxxxxxxxx
> To Subscribe or Unsubscribe, please go to:
> http://list.cobalt.com/mailman/listinfo/cobalt-users
>

Hi Todd,

the user of your apache can be found in your /etc/httpd/conf/httpd.conf
It probably looks like this:

# User/Group: The name (or #number) of the user/group to run httpd as.
#  On SCO (ODT 3) use User nouser and Group nogroup
#  On HPUX you may not be able to use shared memory as nobody, and the
#  suggested workaround is to create a user www and use that user.
#  NOTE that some kernels refuse to setgid(Group) or semctl(IPC_SET)
#  when the value of (unsigned)Group is above 60000;
#  don't use Group nobody on these systems!

User httpd
Group httpd

you may give your formail script the site admin's user name and the site's
group, ie chown siteadmin.sitex ./formmail.cgi and after that do chmod 755.

BTW, formail is insecure! Search the archives for 'formmail'. It can be
abused by spammers.

User nobody is not used on cobalt apaches. The error will no longer appear
if you apply these changes as told above.

HTH,



Regards,

Hendrik
--

_______________________________________________
cobalt-users mailing list
cobalt-users@xxxxxxxxxxxxxxx
To Subscribe or Unsubscribe, please go to:
http://list.cobalt.com/mailman/listinfo/cobalt-users