Issue with ExecCGI in document root with fc6

[Mike Martin]

Does anyone know what I have to do in FC6 to get cgi scripts to run
from document root

I have copied my setup from FC5 but I just get the contents of the script

httpd.conf section

DocumentRoot "/var/www/html"

#
# Each directory to which Apache has access can be configured with respect
# to which services and features are allowed and/or disabled in that
# directory (and its subdirectories).
#
# First, we configure the "default" to be a very restrictive set of
# features.
#
<Directory />
    Options FollowSymLinks
    AllowOverride None
</Directory>

#
# Note that from this point forward you must specifically allow
# particular features to be enabled - so if something's not working as
# you might expect, make sure that you have specifically enabled it
# below.
#

#
# This should be changed to whatever you set DocumentRoot to.
#
<Directory "/var/www/html">

#
# Possible values for the Options directive are "None", "All",
# or any combination of:
#   Indexes Includes FollowSymLinks SymLinksifOwnerMatch ExecCGI MultiViews
#
# Note that "MultiViews" must be named *explicitly* --- "Options All"
# doesn't give it to you.
#
# The Options directive is both complicated and important.  Please see
# http://httpd.apache.org/docs/2.2/mod/core.html#options
# for more information.
#
    Options Indexes FollowSymLinks ExecCGI

#
# AllowOverride controls what directives may be placed in .htaccess files.
# It can be "All", "None", or any combination of the keywords:
#   Options FileInfo AuthConfig Limit
#
    AllowOverride All

#
# Controls who can get stuff from this server.
#
    Order allow,deny
    Allow from all

</Directory>


Cant see any bugs open

[Pete Graner]

Mike Martin wrote:
>  Does anyone know what I have to do in FC6 to get cgi scripts to run
>  from document root
>  
>  I have copied my setup from FC5 but I just get the contents of the script
>  
>  httpd.conf section
>  
>  DocumentRoot "/var/www/html"
>  
>  #
>  # Each directory to which Apache has access can be configured with respect
>  # to which services and features are allowed and/or disabled in that
>  # directory (and its subdirectories).
>  #
>  # First, we configure the "default" to be a very restrictive set of
>  # features.
>  #
>  <Directory />
>     Options FollowSymLinks
>     AllowOverride None
>  </Directory>
>  
>  #
>  # Note that from this point forward you must specifically allow
>  # particular features to be enabled - so if something's not working as
>  # you might expect, make sure that you have specifically enabled it
>  # below.
>  #
>  
>  #
>  # This should be changed to whatever you set DocumentRoot to.
>  #
>  <Directory "/var/www/html">
>  
>  #
>  # Possible values for the Options directive are "None", "All",
>  # or any combination of:
>  #   Indexes Includes FollowSymLinks SymLinksifOwnerMatch ExecCGI MultiViews
>  #
>  # Note that "MultiViews" must be named *explicitly* --- "Options
> All"
>  # doesn't give it to you.
>  #
>  # The Options directive is both complicated and important.  Please see
>  # http://httpd.apache.org/docs/2.2/mod/core.html#options
>  # for more information.
>  #
>     Options Indexes FollowSymLinks ExecCGI
>  
>  #
>  # AllowOverride controls what directives may be placed in .htaccess files.
>  # It can be "All", "None", or any combination of the keywords:
>  #   Options FileInfo AuthConfig Limit
>  #
>     AllowOverride All
>  
>  #
>  # Controls who can get stuff from this server.
>  #
>     Order allow,deny
>     Allow from all
>  
>  </Directory>
>  
>  
>  Cant see any bugs open
>   
Do you have SELinux Enabled?

-- 
Pete Graner                                email: <pgraner(a)redhat.com&gt;

[Mike Martin]

On 04/11/06, Pete Graner <pgraner(a)redhat.com&gt; wrote:
>  Mike Martin wrote:
>  > Does anyone know what I have to do in FC6 to get cgi scripts to run
>  > from document root
>  >
>  > I have copied my setup from FC5 but I just get the contents of the script
>  >
>  > httpd.conf section
>  >
>  > DocumentRoot "/var/www/html"
>  >
>  > #
>  > # Each directory to which Apache has access can be configured with respect
>  > # to which services and features are allowed and/or disabled in that
>  > # directory (and its subdirectories).
>  > #
>  > # First, we configure the "default" to be a very restrictive set of
>  > # features.
>  > #
>  > <Directory />
>  >    Options FollowSymLinks
>  >    AllowOverride None
>  > </Directory>
>  >
>  > #
>  > # Note that from this point forward you must specifically allow
>  > # particular features to be enabled - so if something's not working as
>  > # you might expect, make sure that you have specifically enabled it
>  > # below.
>  > #
>  >
>  > #
>  > # This should be changed to whatever you set DocumentRoot to.
>  > #
>  > <Directory "/var/www/html">
>  >
>  > #
>  > # Possible values for the Options directive are "None", "All",
>  > # or any combination of:
>  > #   Indexes Includes FollowSymLinks SymLinksifOwnerMatch ExecCGI MultiViews
>  > #
>  > # Note that "MultiViews" must be named *explicitly* --- "Options
> All"
>  > # doesn't give it to you.
>  > #
>  > # The Options directive is both complicated and important.  Please see
>  > # http://httpd.apache.org/docs/2.2/mod/core.html#options
>  > # for more information.
>  > #
>  >    Options Indexes FollowSymLinks ExecCGI
>  >
>  > #
>  > # AllowOverride controls what directives may be placed in .htaccess files.
>  > # It can be "All", "None", or any combination of the keywords:
>  > #   Options FileInfo AuthConfig Limit
>  > #
>  >    AllowOverride All
>  >
>  > #
>  > # Controls who can get stuff from this server.
>  > #
>  >    Order allow,deny
>  >    Allow from all
>  >
>  > </Directory>
>  >
>  >
>  > Cant see any bugs open
>  >
>
>  Do you have SELinux Enabled?
>
>  --
>  Pete Graner                                email: <pgraner(a)redhat.com&gt;
>
>  --
>  fedora-test-list mailing list
>  fedora-test-list(a)redhat.com
>  To unsubscribe:
>  https://www.redhat.com/mailman/listinfo/fedora-test-list
>  
yep - no diff with protection for httpd disabled

[Jeff Vian]

On Sat, 2006-11-04 at 18:25 +0000, Mike Martin wrote:
>  Does anyone know what I have to do in FC6 to get cgi scripts to run
>  from document root
>   
In the interest of security, don't.

There is a script directory already configured (/var/www/cgi) for
running cgi scripts.  I would never recommend that you allow scripts to
be run under /var/www/html.

If you insist on doing so, look at the config for /var/www/cgi and
enable the same for /var/www/html.  Selinux will also play a part in
getting it to work.




>  I have copied my setup from FC5 but I just get the contents of the
> script
>  
>  httpd.conf section
>  
>  DocumentRoot "/var/www/html"
>  
>  #
>  # Each directory to which Apache has access can be configured with respect
>  # to which services and features are allowed and/or disabled in that
>  # directory (and its subdirectories).
>  #
>  # First, we configure the "default" to be a very restrictive set of
>  # features.
>  #
>  <Directory />
>      Options FollowSymLinks
>      AllowOverride None
>  </Directory>
>  
>  #
>  # Note that from this point forward you must specifically allow
>  # particular features to be enabled - so if something's not working as
>  # you might expect, make sure that you have specifically enabled it
>  # below.
>  #
>  
>  #
>  # This should be changed to whatever you set DocumentRoot to.
>  #
>  <Directory "/var/www/html">
>  
>  #
>  # Possible values for the Options directive are "None", "All",
>  # or any combination of:
>  #   Indexes Includes FollowSymLinks SymLinksifOwnerMatch ExecCGI MultiViews
>  #
>  # Note that "MultiViews" must be named *explicitly* --- "Options
> All"
>  # doesn't give it to you.
>  #
>  # The Options directive is both complicated and important.  Please see
>  # http://httpd.apache.org/docs/2.2/mod/core.html#options
>  # for more information.
>  #
>      Options Indexes FollowSymLinks ExecCGI
>  
>  #
>  # AllowOverride controls what directives may be placed in .htaccess files.
>  # It can be "All", "None", or any combination of the keywords:
>  #   Options FileInfo AuthConfig Limit
>  #
>      AllowOverride All
>  
>  #
>  # Controls who can get stuff from this server.
>  #
>      Order allow,deny
>      Allow from all
>  
>  </Directory>
>  
>  
>  Cant see any bugs open
>