Path: csiph.com!v102.xanadu-bbs.net!xanadu-bbs.net!feeder.erje.net!eu.feeder.erje.net!newsfeed.xs4all.nl!newsfeed3.news.xs4all.nl!xs4all!post.news.xs4all.nl!not-for-mail Return-Path: X-Original-To: python-list@python.org Delivered-To: python-list@mail.python.org X-Spam-Status: OK 0.019 X-Spam-Evidence: '*H*': 0.96; '*S*': 0.00; 'syntax': 0.04; 'root': 0.05; 'modify': 0.07; 'loaded,': 0.09; 'restart': 0.09; 'subject:script': 0.09; 'python': 0.11; 'apache': 0.15; '175': 0.16; 'guess.': 0.16; 'rebuild': 0.16; 'skipping': 0.16; 'subject:Apache': 0.16; 'subject:issue': 0.16; 'subject:run': 0.16; 'subject:python': 0.16; 'module': 0.19; 'to:name:python- list@python.org': 0.22; 'error': 0.23; 'received:65.55.116': 0.24; 'script': 0.25; '>': 0.26; 'suggested': 0.26; 'header:In-Reply- To:1': 0.27; 'strongly': 0.30; 'serve': 0.31; 'subject:that': 0.31; 'file': 0.32; 'run': 0.32; 'another': 0.32; 'date:': 0.34; 'something': 0.35; 'but': 0.35; 'there': 0.35; 'list': 0.37; 'email addr:python.org': 0.37; 'server': 0.38; 'to:addr:python- list': 0.38; 'issue': 0.38; 'skip:- 10': 0.38; 'fact': 0.38; 'subject:': 0.39; 'to:addr:python.org': 0.39; 'how': 0.40; 'skip:u 10': 0.60; 'read': 0.60; 'email addr:gmail.com': 0.63; 're:': 0.63; 'skip:n 10': 0.64; 'email name:python-list': 0.65; 'nobody': 0.68; 'env': 0.84; 'skip:/ 30': 0.84; 'good,': 0.91; 'subject:let': 0.93; 'race': 0.95; '2013': 0.98 X-TMN: [e6fp+QmeZzuANY72GZi++pthZdaFlTAM] X-Originating-Email: [carlosnepomuceno@outlook.com] Content-Type: multipart/alternative; boundary="_bdc0e3f7-c1c4-4260-a975-470f837e858a_" From: Carlos Nepomuceno To: "python-list@python.org" Subject: RE: Apache and suexec issue that wont let me run my python script Date: Tue, 4 Jun 2013 16:13:24 +0300 Importance: Normal In-Reply-To: References: <20a49aac-3867-481f-96d4-c95a050781ed@googlegroups.com>,>,<, >,>,, , , ,,> , , >,,<, > <51AD2564.6080707@gmail.com>, , , ,,> , , >,,<, > <51AD70E8.70506@gmail.com>, , , ,,> ,,>,<, <,> <6c0ed9da-0f29-4b6b-a804-771763454dd4@googlegroups.com>, ,>,<,>,, > <,>,<,,, ,>,<, , > <, ,,<4ed43a69-0dfe-4078-a836-db5201811761@googlegroups.com>, , >,, > <,,<2e1dbdc2-6bca-4c4e-93b0-4c0cddb72bc1@googlegroups.com>, , >,<03d8964e-7cea-4072-b1f1-19d83e494191@googlegroups.com>,,> , >, , , MIME-Version: 1.0 X-OriginalArrivalTime: 04 Jun 2013 13:13:24.0705 (UTC) FILETIME=[4B670510:01CE6125] X-BeenThere: python-list@python.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: General discussion list for the Python programming language List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Newsgroups: comp.lang.python Message-ID: Lines: 81 NNTP-Posting-Host: 2001:888:2000:d::a6 X-Trace: 1370351605 news.xs4all.nl 15948 [2001:888:2000:d::a6]:50715 X-Complaints-To: abuse@xs4all.nl Xref: csiph.com comp.lang.python:46895 --_bdc0e3f7-c1c4-4260-a975-470f837e858a_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable > Date: Tue=2C 4 Jun 2013 05:57:54 -0700 > Subject: Re: Apache and suexec issue that wont let me run my python scrip= t > From: nikos.gr33k@gmail.com > To: python-list@python.org >=20 > root@nikos [~]# nano /usr/local/apache/conf/httpd.conf >=20 > and altering user nobody to user root. >=20 > root@nikos [~]# service httpd restart > [Tue Jun 04 15:56:42 2013] [warn] module rpaf_module is already loaded=2C= skipping > Syntax error on line 175 of /usr/local/apache/conf/httpd.conf: > Error:\tApache has not been designed to serve pages while\n\trunning as r= oot. There are known race conditions that\n\twill allow any local user to = read any file on the system.\n\tIf you still desire to serve pages as root = then\n\tadd -DBIG_SECURITY_HOLE to the CFLAGS env variable\n\tand then rebu= ild the server.\n\tIt is strongly suggested that you instead modify the Use= r\n\tdirective in your httpd.conf file to list a non-root\n\tuser.\n > root@nikos [~]# >=20 > What can i do? You don't need to run httpd as root. In fact it's risky. You can use anothe= r user with less privileges to run it like nobody or something else you see= fit. I don't think the suggestion to rebuild the server is good=2C but I don't k= now how cPanel works so it's just a guess. = --_bdc0e3f7-c1c4-4260-a975-470f837e858a_ Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable


>=3B Date: Tue=2C= 4 Jun 2013 05:57:54 -0700
>=3B Subject: Re: Apache and suexec issue t= hat wont let me run my python script
>=3B From: nikos.gr33k@gmail.com<= br>>=3B To: python-list@python.org
>=3B
>=3B root@nikos [~]# n= ano /usr/local/apache/conf/httpd.conf
>=3B
>=3B and altering use= r nobody to user root.
>=3B
>=3B root@nikos [~]# service httpd r= estart
>=3B [Tue Jun 04 15:56:42 2013] [warn] module rpaf_module is al= ready loaded=2C skipping
>=3B Syntax error on line 175 of /usr/local/a= pache/conf/httpd.conf:
>=3B Error:\tApache has not been designed to se= rve pages while\n\trunning as root. There are known race conditions that\n= \twill allow any local user to read any file on the system.\n\tIf you still= desire to serve pages as root then\n\tadd -DBIG_SECURITY_HOLE to the CFLAG= S env variable\n\tand then rebuild the server.\n\tIt is strongly suggested = that you instead modify the User\n\tdirective in your httpd.conf file to li= st a non-root\n\tuser.\n
>=3B root@nikos [~]#
>=3B
>=3B Wha= t can i do?

You don't need to run httpd as root. In fact it's risky.= You can use another user with less privileges to run it like nobody or som= ething else you see fit.

I don't think the suggestion to rebuild the= server is good=2C but I don't know how cPanel works so it's just a guess.<= br>

= --_bdc0e3f7-c1c4-4260-a975-470f837e858a_--