mod_process_security
C Roff Makefile Ruby Perl Shell
Clone or download
Fetching latest commit…
Cannot retrieve the latest commit at this time.
Permalink
Failed to load latest commit information.
test update userinfo.cgi Feb 3, 2016
.clang-format Apply clang-format Aug 31, 2015
.gitignore Add ignore files Aug 31, 2015
.travis.yml Rename my username Jan 25, 2018
LEGAL Add license information Aug 31, 2015
MITL
Makefile
README.md Rename username Jan 17, 2017
mod_process_security.c apply of clang format Nov 26, 2015
mod_process_security_dav.h

README.md

mod_process_security Build Status

This module is a suEXEC module for CGI and DSO. Improvement of mod_ruid2(vulnerability) and mod_suexec(performance).

See also http://blog.matsumoto-r.jp/?p=1972

How To Compile

  • build
apxs -i -c -l cap mod_process_security.c
  • Add to httpd.conf or conf.d/process_security.conf
LoadModule process_security_module   modules/mod_process_security.so
PSExAll On

How To Use

  • Set Enable All Extensions On. (default Off)
PSExAll On
  • Set Enable ALL CGI Extensions On. (default Off)
PSExCGI On
  • [Optional] Set Enable Custom Extensions. (unset PSExAll)
PSExtensions .php .pl .py
  • [Optional] Set Enable Custom Handlers. (unset PSExAll)
PSHandlers application/x-httpd-php hoge-script
  • [Optional] Set Ignore Custom Extensions.
# .html and .css were ignored
PSExAll On
PSIgnoreExtensions .html .css
  • [Optional] Minimal uid and gid. (default uid:100 gid:100)
PSMinUidGid 200 200
  • [Optional] Default uid and gid. (default uid:48 gid:48)
PSDefaultUidGid
  • [Optional] Enable run with root permission (default Off)
PSRootEnable On

License

under the MIT License: