home *** CD-ROM | disk | FTP | other *** search
Wrap
<?xml version="1.0" encoding="EUC-JP"?> <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"> <html xmlns="http://www.w3.org/1999/xhtml" lang="ja" xml:lang="ja"><head><!-- XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX This file is generated from xml source: DO NOT EDIT XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX --> <title>suEXEC Ñ╡Ñ▌í╝Ñ╚ - Apache HTTP Ñ╡í╝Ñ╨</title> <link href="./style/css/manual.css" rel="stylesheet" media="all" type="text/css" title="Main stylesheet" /> <link href="./style/css/manual-loose-100pc.css" rel="alternate stylesheet" media="all" type="text/css" title="No Sidebar - Default font size" /> <link href="./style/css/manual-print.css" rel="stylesheet" media="print" type="text/css" /> <link href="./images/favicon.ico" rel="shortcut icon" /></head> <body id="manual-page"><div id="page-header"> <p class="menu"><a href="./mod/">ÑΓÑ╕Ñσí╝Ñδ</a> | <a href="./mod/directives.html">Ñ╟ÑúÑ∞Ñ»Ñ╞ÑúÑ╓</a> | <a href="./faq/">FAQ</a> | <a href="./glossary.html">═╤╕∞</a> | <a href="./sitemap.html">Ñ╡ÑñÑ╚Ñ▐Ñ├Ñ╫</a></p> <p class="apache">Apache HTTP Ñ╡í╝Ñ╨ Ñ╨í╝Ñ╕ÑτÑ≤ 2.0</p> <img alt="" src="./images/feather.gif" /></div> <div class="up"><a href="./"><img title="<-" alt="<-" src="./images/left.gif" /></a></div> <div id="path"> <a href="http://www.apache.org/">Apache</a> > <a href="http://httpd.apache.org/">HTTP Ñ╡í╝Ñ╨</a> > <a href="http://httpd.apache.org/docs-project/">Ñ╔Ñ¡ÑσÑßÑ≤Ñ╞í╝Ñ╖ÑτÑ≤</a> > <a href="./">Ñ╨í╝Ñ╕ÑτÑ≤ 2.0</a></div><div id="page-content"><div id="preamble"><h1>suEXEC Ñ╡Ñ▌í╝Ñ╚</h1> <div class="toplang"> <p><span>Available Languages: </span><a href="./en/suexec.html" hreflang="en" rel="alternate" title="English"> en </a> | <a href="./ja/suexec.html" title="Japanese"> ja </a> | <a href="./ko/suexec.html" hreflang="ko" rel="alternate" title="Korean"> ko </a></p> </div> <p><strong>suEXEC</strong> ╡í╟╜ñ╦ñΦñΩíóApache ѵí╝Ñ╢ñ╧ Web Ñ╡í╝Ñ╨ñ≥╝┬╣╘ñ╖ñ╞ñññδѵí╝Ñ╢ ID ñ╚ñ╧ ░█ñ╩ñδѵí╝Ñ╢ ID ñ╟ <strong>CGI</strong> Ñ╫ÑφÑ░ÑΘÑαñΣ <strong>SSI</strong> Ñ╫ÑφÑ░ÑΘÑαñ≥╝┬╣╘ñ╣ñδñ│ñ╚ñ¼ñ╟ñ¡ñ▐ñ╣íúCGI Ñ╫ÑφÑ░ÑΘÑαñ▐ñ┐ñ╧ SSI Ñ╫ÑφÑ░ÑΘÑαñ≥╝┬╣╘ñ╣ñδ╛∞╣τíó─╠╛∩ñ╧ web Ñ╡í╝Ñ╨ñ╚╞▒ñ╕ѵí╝Ñ╢ñ╟╝┬╣╘ñ╡ñ∞ñ▐ñ╣íú </p> <p>┼¼└┌ñ╦╗╚═╤ñ╣ñδñ╚íóñ│ñ╬╡í╟╜ñ╦ñΦñΩѵí╝Ñ╢ñ¼╕─╩╠ñ╬ CGI ñΣ SSI Ñ╫ÑφÑ░ÑΘÑαñ≥│½╚»ñ╖╝┬╣╘ñ╣ñδñ│ñ╚ñ╟└╕ñ╕ñδÑ╗Ñ¡ÑσÑΩÑ╞Ñú╛σñ╬┤φ╕▒ñ≥íó ñ½ñ╩ñΩ╕║ñΘñ╣ñ│ñ╚ñ¼ñ╟ñ¡ñ▐ñ╣íúñ╖ñ½ñ╖íósuEXEC ñ╬└▀─Ωñ¼╔╘┼¼└┌ñ└ñ╚íó ┬┐ñ»ñ╬╠Σ┬Ωñ¼└╕ñ╕íóñóñ╩ñ┐ñ╬Ñ│Ñ≤Ñ╘Ñσí╝Ñ┐ñ╦┐╖ñ╖ññÑ╗Ñ¡ÑσÑΩÑ╞ÑúÑ█í╝Ñδñ≥ ║εñ├ñ╞ñ╖ñ▐ñª▓─╟╜└¡ñ¼ñóñΩñ▐ñ╣íúñóñ╩ñ┐ñ¼ <em>setuid root</em> ñ╡ñ∞ñ┐Ñ╫ÑφÑ░ÑΘÑαñ╚íóñ╜ñ∞ñΘñ½ñΘ└╕ñ╕ñδÑ╗Ñ¡ÑσÑΩÑ╞Ñú╛σñ╬╠Σ┬Ωñ╬┤╔═²ñ╦ ╛▄ñ╖ñ»ñ╩ñññΦñªñ╩ñΘíósuEXEC ñ╬╗╚═╤ñ≥╕í╞ññ╖ñ╩ñññΦñªñ╦╢»ñ»┐Σ╛⌐ñ╖ñ▐ñ╣íú </p> </div> <div id="quickview"><ul id="toc"><li><img alt="" src="./images/down.gif" /> <a href="#before">╗╧ñßñδ┴░ñ╦</a></li> <li><img alt="" src="./images/down.gif" /> <a href="#model">suEXEC Ñ╗Ñ¡ÑσÑΩÑ╞ÑúÑΓÑ╟Ñδ</a></li> <li><img alt="" src="./images/down.gif" /> <a href="#install">suEXEC ñ╬└▀─Ωñ╚ÑñÑ≤Ñ╣Ñ╚í╝Ñδ</a></li> <li><img alt="" src="./images/down.gif" /> <a href="#enable">suEXEC ñ╬═¡╕·▓╜ñ╚╠╡╕·▓╜</a></li> <li><img alt="" src="./images/down.gif" /> <a href="#usage">suEXEC ñ╬╗╚═╤</a></li> <li><img alt="" src="./images/down.gif" /> <a href="#debug">suEXEC ñ╬Ñ╟Ñ╨Ñ├Ñ░</a></li> <li><img alt="" src="./images/down.gif" /> <a href="#jabberwock">ñ╚ñ½ñ▓ñ╦├φ░╒: ╖┘╣≡ñ╚╗÷╬π</a></li> </ul></div> <div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div> <div class="section"> <h2><a name="before" id="before">╗╧ñßñδ┴░ñ╦</a></h2> <p>ñ│ñ╬╩╕╜±ñ╬└Φ╞¼ñ╦╚⌠ñ╓┴░ñ╦íóApache Ñ░Ñδí╝Ñ╫ñ╚ñ│ñ╬╩╕╜±ñ╟ñ╬▓╛─Ωñ≥├╬ñ├ñ╞ñ¬ñ»ñ┘ñ¡ñ╟ñ╖ñτñªíú </p> <p>┬Φ 1 ñ╦íóñóñ╩ñ┐ñ¼ <strong>setuid</strong> ñ╚ <strong>setgid</strong> ┴α║εñ¼▓─╟╜ñ╩ UNIX ═│═Φñ╬ѬÑ┌Ñ∞í╝Ñ╞ÑúÑ≤Ñ░Ñ╖Ñ╣Ñ╞Ñαñ≥╗╚ñ├ñ╞ñññδñ│ñ╚ñ≥┴█─Ωñ╖ñ╞ñññ▐ñ╣íú ñ│ñ∞ñ╧íóñ╣ñ┘ñ╞ñ╬Ñ│Ñ▐Ñ≤Ñ╔╬πñ╦ñóñ╞ñ╧ñ▐ñΩñ▐ñ╣íú ñ╜ñ╬┬╛ñ╬Ñ╫ÑΘÑ├Ñ╚Ñ█í╝Ñαñ╟ñ╧íóñΓñ╖ suEXEC ñ¼Ñ╡Ñ▌í╝Ñ╚ñ╡ñ∞ñ╞ñññ┐ñ╚ñ╖ñ╞ñΓ└▀─Ωñ╧░█ñ╩ñδñ½ñΓñ╖ñ∞ñ▐ñ╗ñ≤íú</p> <p>┬Φ 2 ñ╦íóñóñ╩ñ┐ñ¼╗╚═╤├µñ╬Ñ│Ñ≤Ñ╘Ñσí╝Ñ┐ñ╬ Ñ╗Ñ¡ÑσÑΩÑ╞Ñúñ╦┤╪ñ╣ñδ┤≡╦▄┼¬ñ╩│╡╟░ñ╚íóñ╜ñ∞ñΘñ╬┤╔═²ñ╦ñ─ñññ╞╛▄ñ╖ñññ│ñ╚ñ≥ ┴█─Ωñ╖ñ╞ñññ▐ñ╣íúñ│ñ∞ñ╧íó<strong>setuid/setgid</strong> ┴α║εíóñóñ╩ñ┐ñ╬Ñ╖Ñ╣Ñ╞Ñα╛σñ╟ñ╬ñ╜ñ╬┴α║εñ╦ñΦñδ══í╣ñ╩╕·▓╠íó Ñ╗Ñ¡ÑσÑΩÑ╞ÑúÑ∞Ñ┘Ñδñ╦ñ─ñññ╞ñóñ╩ñ┐ñ¼═²▓≥ñ╖ñ╞ñññδñ╚ñññªñ│ñ╚ñ≥┤▐ñ▀ñ▐ñ╣íú </p> <p>┬Φ 3 ñ╦íó<strong>▓■┬ññ╡ñ∞ñ╞ñññ╩ññ</strong> suEXEC Ñ│í╝Ñ╔ñ╬╗╚═╤ñ≥┴█─Ωñ╖ñ╞ñññ▐ñ╣íúsuEXEC ñ╬Ñ│í╝Ñ╔ñ╧íó ┬┐ñ»ñ╬Ñ┘í╝Ñ┐Ñ╞Ñ╣Ñ┐ñ└ñ▒ñ╟ñ╩ñ»íó│½╚»╝╘ñ╦ñΦñ├ñ╞ñΓ├φ░╒┐╝ñ»└║║║ñ╡ñ∞ Ñ╞Ñ╣Ñ╚ñ╡ñ∞ñ╞ñññ▐ñ╣íúñ╜ñ∞ñΘñ╬├φ░╒ñ╦ñΦñΩíó┤╩╖Θñ╟┐«═Ωñ╟ñ¡ñδ░┬┴┤ñ╩ Ñ│í╝Ñ╔ñ╬┤≡╚╫ñ¼╩▌╛┌ñ╡ñ∞ñ▐ñ╣íúñ│ñ╬Ñ│í╝Ñ╔ñ≥▓■╩╤ñ╣ñδñ│ñ╚ñ╟íó ═╜┤ⁿñ╡ñ∞ñ╩ññ╠Σ┬ΩñΣ┐╖ñ╖ññÑ╗Ñ¡ÑσÑΩÑ╞Ñú╛σñ╬┤φ╕▒ñ¼└╕ñ╕ñδñ│ñ╚ñ¼ñóñΩñ▐ñ╣íú Ñ╗Ñ¡ÑσÑΩÑ╞ÑúÑ╫ÑφÑ░ÑΘÑ▀Ñ≤Ñ░ñ╬╛▄║┘ñ╦─╠ñ╕ñ╞ñññ╞íó ║ú╕σñ╬╕í╞ññ╬ñ┐ñßñ╦└«▓╠ñ≥ Apache Ñ░Ñδí╝Ñ╫ñ╚╢ª═¡ñ╖ñΦñªñ╚╗╫ñªñ╬ñ╟ñ╩ñ▒ñ∞ñ╨íósuEXEC Ñ│í╝Ñ╔ñ╧╩╤ñ¿ñ╩ñññ│ñ╚ñ≥ <strong>╢»ñ»</strong>┐Σ╛⌐ñ╖ñ▐ñ╣íú</p> <p>┬Φ 4 ñ╦íóñ│ñ∞ñ¼║╟╕σñ╟ñ╣ñ¼íósuEXEC ñ≥ Apache ñ╬Ñ╟Ñ╒Ñ⌐ÑδÑ╚ÑñÑ≤Ñ╣Ñ╚í╝Ñδñ╦ñ╧<strong>┤▐ñßñ╩ññ</strong>ñ│ñ╚ñ¼ Apache Ñ░Ñδí╝Ñ╫ñ╟╖Φ─Ωñ╡ñ∞ñ╞ñññ▐ñ╣íúñ│ñ∞ñ╧íósuEXEC ñ╬└▀─Ωñ╦ñ╧┤╔═²╝╘ñ╬╛▄║┘ñ╦ñ∩ñ┐ñδ┐╡╜┼ñ╩├φ░╒ñ¼╔¼═╫ñ└ñ½ñΘñ╟ñ╣íú suEXEC ñ╬══í╣ñ╩└▀─Ωñ╦ñ─ñññ╞╕í╞ññ¼╜¬ñ∩ñ∞ñ╨íó┤╔═²╝╘ñ╧ suEXEC ñ≥─╠╛∩ñ╬ÑñÑ≤Ñ╣Ñ╚í╝Ñδ╩²╦íñ╟ÑñÑ≤Ñ╣Ñ╚í╝Ñδñ╣ñδñ│ñ╚ñ¼ñ╟ñ¡ñ▐ñ╣íú ñ│ñ∞ñΘñ╬└▀─Ω├═ñ╧íósuEXEC ╡í╟╜ñ╬╗╚═╤├µñ╦Ñ╖Ñ╣Ñ╞ÑαÑ╗Ñ¡ÑσÑΩÑ╞Ñúñ≥┼¼└┌ñ╦╩▌ñ─ñ┐ñßñ╦íó ┤╔═²╝╘ñ╦ñΦñ├ñ╞┐╡╜┼ñ╦╖Φ─Ωñ╡ñ∞╗╪─Ωñ╡ñ∞ñδñ│ñ╚ñ¼╔¼═╫ñ╟ñ╣íú ñ│ñ╬╛▄║┘ñ╩╝Ω╜τñ╦ñΦñΩíóApache Ñ░Ñδí╝Ñ╫ñ╧íósuEXEC ñ╬ÑñÑ≤Ñ╣Ñ╚í╝Ñδñ╦ñ─ñññ╞íó├φ░╒┐╝ñ»╜╜╩¼ñ╦╕í╞ññ╖ñ╞ñ╜ñ∞ñ≥╗╚═╤ñ╣ñδñ│ñ╚ñ≥ ╖Φ─Ωñ╖ñ┐╛∞╣τñ╦╕┬ñ├ñ╞ñññ┐ñ└ñ¡ñ┐ñññ╚╣═ñ¿ñ╞ñññ▐ñ╣íú </p> <p>ñ╜ñ∞ñ╟ñΓ┐╩ñ▀ñ▐ñ╣ñ½? ñΦñφñ╖ññíúñ╟ñ╧íó└Φñ╪┐╩ñ▀ñ▐ñ╖ñτñª!</p> </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div> <div class="section"> <h2><a name="model" id="model">suEXEC Ñ╗Ñ¡ÑσÑΩÑ╞ÑúÑΓÑ╟Ñδ</a></h2> <p>suEXEC ñ╬└▀─Ωñ╚ÑñÑ≤Ñ╣Ñ╚í╝Ñδñ≥╗╧ñßñδ┴░ñ╦íó ñ▐ñ║╝┬┴⌡ñ╖ñΦñªñ╚ñ╖ñ╞ñññδÑ╗Ñ¡ÑσÑΩÑ╞ÑúÑΓÑ╟Ñδñ╦ñ─ñññ╞╧└ñ╕ñ╞ñ¬ñ¡ñ▐ñ╣íú ñ╜ñ∞ñ╦ñ╧íósuEXEC ñ╬╞Γ╔⌠ñ╟╣╘ñ╩ñ∩ñ∞ñ╞ñññδñ│ñ╚íó Ñ╖Ñ╣Ñ╞Ñαñ╬Ñ╗Ñ¡ÑσÑΩÑ╞Ñúñ≥╩▌╛┌ñ╣ñδñ┐ñßñ╦╖┘╣≡ñ╡ñ∞ñδñ│ñ╚ñ≥ ñΦñ»═²▓≥ñ╖ñ╞ñ¬ñññ┐╩²ñ¼ñΦñññ╟ñ╖ñτñªíú</p> <p><strong>suEXEC</strong> ñ╧íóApache web Ñ╡í╝Ñ╨ñ½ñΘ╕╞ñ╙╜╨ñ╡ñ∞ñδ setuid ñ╡ñ∞ñ┐ "wrapper" Ñ╫ÑφÑ░ÑΘÑαñ¼┤≡╦▄ñ╚ñ╩ñ├ñ╞ñññ▐ñ╣íú└▀╖╫ñ╖ñ┐ CGIíóñ▐ñ┐ñ╧ SSI Ñ╫ÑφÑ░ÑΘÑαñ╪ñ╬ HTTP ÑΩѻѿÑ╣Ñ╚ñ¼ñóñδñ╚íóñ│ñ╬ wrapper ñ¼╕╞ñ╙╜╨ñ╡ñ∞ñ▐ñ╣íúñ│ñ╬ñΦñªñ╩ÑΩѻѿÑ╣Ñ╚ñ¼ñóñδñ╚íóApache ñ╧ñ╜ñ╬Ñ╫ÑφÑ░ÑΘÑαñ¼╝┬╣╘ñ╡ñ∞ñδ║▌ñ╬Ñ╫ÑφÑ░ÑΘÑα╠╛ñ╚ѵí╝Ñ╢ ID ñ╚Ñ░Ñδí╝Ñ╫ ID ñ≥╗╪─Ωñ╖ñ╞ suEXEC wrapper ñ≥╝┬╣╘ñ╖ñ▐ñ╣íú </p> <p>ñ╜ñ∞ñ½ñΘíówrapper ñ╧└«╕∙ñ▐ñ┐ñ╧╝║╟╘ñ≥╖Φ─Ωñ╣ñδñ┐ñß ░╩▓╝ñ╬╜Φ═²ñ≥╣╘ñ╩ñññ▐ñ╣íúñ│ñ∞ñΘñ╬╛⌡┬╓ñ╬ñªñ┴░∞ñ─ñ╟ñΓ╝║╟╘ñ╖ñ┐╛∞╣τíó Ñ╫ÑφÑ░ÑΘÑαñ╧╝║╟╘ñ≥ÑφÑ░ñ╦╡¡╧┐ñ╖ñ╞Ñ¿ÑΘí╝ñ╟╜¬╬╗ñ╖ñ▐ñ╣íú ñ╜ñªñ╟ñ╩ñ▒ñ∞ñ╨íó╕σñ╬╜Φ═²ñ¼┬│ñ▒ñΘñ∞ñ▐ñ╣íú</p> <ol> <li> <strong>wrapper ñ≥╝┬╣╘ñ╖ñ╞ñññδѵí╝Ñ╢ñ╧ñ│ñ╬Ñ╖Ñ╣Ñ╞Ñαñ╬└╡┼÷ñ╩ѵí╝Ñ╢ñ½?</strong> <p class="indent"> ñ│ñ∞ñ╧íówrapper ñ≥╝┬╣╘ñ╖ñ╞ñññδѵí╝Ñ╢ñ¼ ╦▄┼÷ñ╦Ñ╖Ñ╣Ñ╞Ñαñ╬═°═╤╝╘ñ╟ñóñδñ│ñ╚ñ≥╩▌╛┌ñ╣ñδñ┐ñßñ╟ñ╣íú </p> </li> <li> <strong>wrapper ñ¼┼¼└┌ñ╩┐⌠ñ╬░·┐⌠ñ╟╕╞ñ╙╜╨ñ╡ñ∞ñ┐ñ½?</strong> <p class="indent"> wrapper ñ╧┼¼└┌ñ╩┐⌠ñ╬░·┐⌠ñ¼═┐ñ¿ñΘñ∞ñ┐╛∞╣τñ╦ñ╬ñ▀╝┬╣╘ñ╡ñ∞ñ▐ñ╣íú ┼¼└┌ñ╩░·┐⌠ñ╬Ñ╒Ñ⌐í╝Ñ▐Ñ├Ñ╚ñ╧ Apache Web Ñ╡í╝Ñ╨ñ╦▓≥╝ßñ╡ñ∞ñ▐ñ╣íú ┼¼└┌ñ╩┐⌠ñ╬░·┐⌠ñ≥╝⌡ñ▒╝ΦñΘñ╩ñ▒ñ∞ñ╨íó╣╢╖Γñ≥ñ╡ñ∞ñ┐ñ½ ñóñ╩ñ┐ñ╬ Apache Ñ╨ÑñÑ╩ÑΩñ╬ suEXEC ñ╬╔⌠╩¼ñ¼ ñ╔ñ│ñ½ñ¬ñ½ñ╖ññ▓─╟╜└¡ñ¼ñóñΩñ▐ñ╣íú </p> </li> <li> <strong>ñ│ñ╬└╡┼÷ñ╩ѵí╝Ñ╢ñ╧ wrapper ñ╬╝┬╣╘ñ≥╡÷▓─ñ╡ñ∞ñ╞ñññδñ½?</strong> <p class="indent"> ñ│ñ╬ѵí╝Ñ╢ñ╧ wrapper ╝┬╣╘ñ≥╡÷▓─ñ╡ñ∞ñ┐ѵí╝Ñ╢ñ╟ñ╣ñ½? ñ┐ñ└░∞┐═ñ╬ѵí╝Ñ╢ (Apache ѵí╝Ñ╢) ñ└ñ▒ñ¼íó ñ│ñ╬Ñ╫ÑφÑ░ÑΘÑαñ╬╝┬╣╘ñ≥╡÷▓─ñ╡ñ∞ñ▐ñ╣íú </p> </li> <li> <strong>┬╨╛▌ñ╬ CGI, SSI Ñ╫ÑφÑ░ÑΘÑαñ¼░┬┴┤ñ╟ñ╩ññ│¼┴╪ñ╬╗▓╛╚ñ≥ñ╖ñ╞ñññδñ½? </strong> <p class="indent"> ┬╨╛▌ñ╬ CGI, SSI Ñ╫ÑφÑ░ÑΘÑαñ¼ '/' ñ½ñΘ╗╧ñ▐ñδíóñ▐ñ┐ñ╧ '..' ñ╦ñΦñδ╗▓╛╚ñ≥╣╘ñ╩ñ├ñ╞ñññ▐ñ╣ñ½? ñ│ñ∞ñΘñ╧╡÷▓─ñ╡ñ∞ñ▐ñ╗ñ≤íú ┬╨╛▌ñ╬Ñ╫ÑφÑ░ÑΘÑαñ╧ suEXEC ñ╬Ñ╔Ñ¡ÑσÑßÑ≤Ñ╚Ñδí╝Ñ╚ (▓╝╡¡ñ╬ <code>--with-suexec-docroot=<em>DIR</em></code> ñ≥╗▓╛╚) ╞Γñ╦┬╕║▀ñ╖ñ╩ñ▒ñ∞ñ╨ñ╩ñΩñ▐ñ╗ñ≤íú </p> </li> <li> <strong>┬╨╛▌ñ╚ñ╩ñδѵí╝Ñ╢╠╛ñ╧└╡┼÷ñ╩ñΓñ╬ñ½?</strong> <p class="indent"> ┬╨╛▌ñ╚ñ╩ñδѵí╝Ñ╢╠╛ñ╧┬╕║▀ñ╖ñ╞ñññ▐ñ╣ñ½? </p> </li> <li> <strong>┬╨╛▌ñ╚ñ╩ñδÑ░Ñδí╝Ñ╫╠╛ñ╧└╡┼÷ñ╩ñΓñ╬ñ½?</strong> <p class="indent"> ┬╨╛▌ñ╚ñ╩ñδÑ░Ñδí╝Ñ╫╠╛ñ╧┬╕║▀ñ╖ñ╞ñññ▐ñ╣ñ½? </p> </li> <li> <strong>╠▄┼¬ñ╬ѵí╝Ñ╢ñ╧Ñ╣í╝Ñ╤í╝ѵí╝Ñ╢ñ╟ñ╧<em>ñ╩ññ</em>ñ½? </strong> <p class="indent"> ║úñ╬ñ╚ñ│ñφíósuEXEC ñ╧ <code><em>root</em></code> ñ╦ñΦñδ CGI/SSI Ñ╫ÑφÑ░ÑΘÑαñ╬╝┬╣╘ñ≥╡÷▓─ñ╖ñ╞ñññ▐ñ╗ñ≤íú </p> </li> <li> <strong>┬╨╛▌ñ╚ñ╩ñδѵí╝Ñ╢ ID ñ╧íó║╟╛«ñ╬ ID ╚╓╣µñΦñΩñΓ<em>┬τñ¡ññ</em>ñ½? </strong> <p class="indent"> ║╟╛«Ñµí╝Ñ╢ ID ╚╓╣µñ╧└▀─Ω╗■ñ╦╗╪─Ωñ╡ñ∞ñ▐ñ╣íúñ│ñ∞ñ╧íó CGI/SSI Ñ╫ÑφÑ░ÑΘÑα╝┬╣╘ñ≥╡÷▓─ñ╡ñ∞ñδѵí╝Ñ╢ ID ñ╬ñ╚ñΩñªñδ║╟╛«├═ñ╟ñ╣íúñ│ñ∞ñ╧ "system" ═╤ñ╬ÑóѽѪÑ≤Ñ╚ñ≥╩─ñß╜╨ñ╣ñ╬ñ╦═¡╕·ñ╟ñ╣íú </p> </li> <li> <strong>┬╨╛▌ñ╚ñ╩ñδÑ░Ñδí╝Ñ╫ñ╧Ñ╣í╝Ñ╤í╝ѵí╝Ñ╢ñ╬Ñ░Ñδí╝Ñ╫ñ╟ñ╧ <em>ñ╩ññ</em>ñ½?</strong> <p class="indent"> ║úñ╬ñ╚ñ│ñφíósuEXEC ñ╧ 'root' Ñ░Ñδí╝Ñ╫ñ╦ñΦñδ CGI/SSI Ñ╫ÑφÑ░ÑΘÑαñ╬╝┬╣╘ñ≥╡÷▓─ñ╖ñ╞ñññ▐ñ╗ñ≤íú </p> </li> <li> <strong>┬╨╛▌ñ╚ñ╩ñδÑ░Ñδí╝Ñ╫ ID ñ╧║╟╛«ñ╬ ID ╚╓╣µñΦñΩñΓ<em>┬τñ¡ññ</em>ñ½?</strong> <p class="indent"> ║╟╛«Ñ░Ñδí╝Ñ╫ ID ╚╓╣µñ╧└▀─Ω╗■ñ╦╗╪─Ωñ╡ñ∞ñ▐ñ╣íúñ│ñ∞ñ╧íó CGI/SSI Ñ╫ÑφÑ░ÑΘÑα╝┬╣╘ñ≥╡÷▓─ñ╡ñ∞ñδÑ░Ñδí╝Ñ╫ ID ñ╬ñ╚ñΩñªñδ║╟╛«├═ñ╟ñ╣íú ñ│ñ∞ñ╧ "system" ═╤ñ╬Ñ░Ñδí╝Ñ╫ñ≥╩─ñß╜╨ñ╣ñ╬ñ╦═¡╕·ñ╟ñ╣íú </p> </li> <li> <strong>wrapper ñ¼└╡╛∩ñ╦┬╨╛▌ñ╚ñ╩ñδѵí╝Ñ╢ñ╚Ñ░Ñδí╝Ñ╫ñ╦ñ╩ñ∞ñδñ½? </strong> <p class="indent"> ñ│ñ│ñ╟íósetuid ñ╚ setgid ñ╬╡»╞░ñ╦ñΦñΩÑ╫ÑφÑ░ÑΘÑαñ╧┬╨╛▌ñ╚ñ╩ñδѵí╝Ñ╢ñ╚Ñ░Ñδí╝Ñ╫ñ╦ñ╩ñΩñ▐ñ╣íú Ñ░Ñδí╝Ñ╫ÑóÑ»Ñ╗Ñ╣ÑΩÑ╣Ñ╚ñ╧íó ѵí╝Ñ╢ñ¼┬░ñ╖ñ╞ñññδñ╣ñ┘ñ╞ñ╬Ñ░Ñδí╝Ñ╫ñ╟╜Θ┤ⁿ▓╜ñ╡ñ∞ñ▐ñ╣íú </p> </li> <li> <strong>CGI/SSI Ñ╫ÑφÑ░ÑΘÑαñ¼├╓ñ½ñ∞ñ╞ñññδÑ╟ÑúÑ∞Ñ»Ñ╚ÑΩñ╦░▄╞░ (change directory) ñ╟ñ¡ñδñ½?</strong> <p class="indent"> Ñ╟ÑúÑ∞Ñ»Ñ╚ÑΩñ¼┬╕║▀ñ╖ñ╩ñññ╩ñΘíóñ╜ñ╬Ñ╒ÑíÑñÑδñΓ┬╕║▀ñ╖ñ╩ñññ½ñΓñ╖ñ∞ñ▐ñ╗ñ≤íú Ñ╟ÑúÑ∞Ñ»Ñ╚ÑΩñ╦░▄╞░ñ╟ñ¡ñ╩ñññ╬ñ╟ñóñ∞ñ╨íóñ¬ñ╜ñΘñ»┬╕║▀ñΓñ╖ñ╩ñññ╟ñ╖ñτñªíú </p> </li> <li> <strong>Ñ╟ÑúÑ∞Ñ»Ñ╚ÑΩñ¼ Apache ñ╬Ñ╔Ñ¡ÑσÑßÑ≤Ñ╚Ñ─ÑΩí╝╞Γñ╦ñóñδñ½? </strong> <p class="indent"> ÑΩѻѿÑ╣Ñ╚ñ¼Ñ╡í╝Ñ╨╞Γñ╬ñΓñ╬ñ╟ñóñ∞ñ╨íó ═╫╡ßñ╡ñ∞ñ┐Ñ╟ÑúÑ∞Ñ»Ñ╚ÑΩñ¼ suEXEC ñ╬Ñ╔Ñ¡ÑσÑßÑ≤Ñ╚Ñδí╝Ñ╚╟█▓╝ñ╦ñóñΩñ▐ñ╣ñ½? ÑΩѻѿÑ╣Ñ╚ñ¼ UserDir ñ╬ñΓñ╬ñ╟ñóñ∞ñ╨íó═╫╡ßñ╡ñ∞ñ┐Ñ╟ÑúÑ∞Ñ»Ñ╚ÑΩñ¼ suEXEC ñ╬ѵí╝Ñ╢ñ╬Ñ╔Ñ¡ÑσÑßÑ≤Ñ╚Ñδí╝Ñ╚╟█▓╝ñ╦ñóñΩñ▐ñ╣ñ½? (<a href="#install">suEXEC └▀─ΩѬÑ╫Ñ╖ÑτÑ≤</a> ╗▓╛╚) </p> </li> <li> <strong>Ñ╟ÑúÑ∞Ñ»Ñ╚ÑΩñ≥┬╛ñ╬ѵí╝Ñ╢ñ¼╜±ñ¡╣■ñßñδñΦñªñ╦ñ╩ñ├ñ╞ <em>ñññ╩ññ</em>ñ½?</strong> <p class="indent"> Ñ╟ÑúÑ∞Ñ»Ñ╚ÑΩñ≥┬╛ѵí╝Ñ╢ñ╦│½╩ⁿñ╖ñ╩ñññΦñªñ╦ñ╖ñ▐ñ╣íú ╜Ω═¡Ñµí╝Ñ╢ñ└ñ▒ñ¼ñ│ñ╬Ñ╟ÑúÑ∞Ñ»Ñ╚ÑΩñ╬╞Γ═╞ñ≥▓■╩╤ñ╟ñ¡ñδñΦñªñ╦ñ╖ñ▐ñ╣íú </p> </li> <li> <strong>┬╨╛▌ñ╚ñ╩ñδ CGI/SSI Ñ╫ÑφÑ░ÑΘÑαñ╧┬╕║▀ñ╣ñδñ½?</strong> <p class="indent"> ┬╕║▀ñ╖ñ╩ñ▒ñ∞ñ╨╝┬╣╘ñ╟ñ¡ñ▐ñ╗ñ≤íú </p> </li> <li> <strong>┬╨╛▌ñ╚ñ╩ñδ CGI/SSI Ñ╫ÑφÑ░ÑΘÑαÑ╒ÑíÑñÑδñ¼┬╛ÑóѽѪÑ≤Ñ╚ñ½ñΘ ╜±ñ¡╣■ñßñδñΦñªñ╦ñ╩ñ├ñ╞<em>ñññ╩ññ</em>ñ½?</strong> <p class="indent"> ╜Ω═¡╝╘░╩│░ñ╦ñ╧ CGI/SSI Ñ╫ÑφÑ░ÑΘÑαñ≥╩╤╣╣ñ╣ñδ╕ó╕┬ñ╧═┐ñ¿ñΘñ∞ñ▐ñ╗ñ≤íú </p> </li> <li> <strong>┬╨╛▌ñ╚ñ╩ñδ CGI/SSI Ñ╫ÑφÑ░ÑΘÑαñ¼ setuid ñ▐ñ┐ñ╧ setgid ñ╡ñ∞ñ╞<em>ñññ╩ññ</em>ñ½?</strong> <p class="indent"> UID/GID ñ≥║╞┼┘╩╤╣╣ñ╖ñ╞ñ╬Ñ╫ÑφÑ░ÑΘÑα╝┬╣╘ñ╧ñ╖ñ▐ñ╗ñ≤ </p> </li> <li> <strong>┬╨╛▌ñ╚ñ╩ñδѵí╝Ñ╢/Ñ░Ñδí╝Ñ╫ñ¼Ñ╫ÑφÑ░ÑΘÑαñ╬ ѵí╝Ñ╢/Ñ░Ñδí╝Ñ╫ñ╚╞▒ñ╕ñ½?</strong> <p class="indent"> ѵí╝Ñ╢ñ¼ñ╜ñ╬Ñ╒ÑíÑñÑδñ╬╜Ω═¡╝╘ñ╟ñ╣ñ½? </p> </li> <li> <strong>░┬┴┤ñ╩╞░║εñ≥╩▌╛┌ñ╣ñδñ┐ñßñ╬┤─╢¡╩╤┐⌠Ñ»ÑΩÑóñ¼▓─╟╜ñ½? </strong> <p class="indent"> suEXEC ñ╧íó░┬┴┤ñ╩┤─╢¡╩╤┐⌠ñ╬ÑΩÑ╣Ñ╚ (ñ│ñ∞ñΘñ╧└▀─Ω╗■ñ╦║ε└«ñ╡ñ∞ñ▐ñ╣) ╞Γñ╬╩╤┐⌠ñ╚ñ╖ñ╞┼╧ñ╡ñ∞ñδ░┬┴┤ñ╩ PATH ╩╤┐⌠ (└▀─Ω╗■ñ╦╗╪─Ωñ╡ñ∞ñ▐ñ╣) ñ≥└▀─Ωñ╣ñδñ│ñ╚ñ╟íó Ñ╫ÑφÑ╗Ñ╣ñ╬┤─╢¡╩╤┐⌠ñ≥Ñ»ÑΩÑóñ╖ñ▐ñ╣íú </p> </li> <li> <strong>┬╨╛▌ñ╚ñ╩ñδ CGI/SSI Ñ╫ÑφÑ░ÑΘÑαñ≥ exec ñ╖ñ╞╝┬╣╘ñ╟ñ¡ñδñ½?</strong> <p class="indent"> ñ│ñ│ñ╟ suEXEC ñ¼╜¬╬╗ñ╖íó┬╨╛▌ñ╚ñ╩ñδÑ╫ÑφÑ░ÑΘÑαñ¼│½╗╧ñ╡ñ∞ñ▐ñ╣íú </p> </li> </ol> <p>ñ│ñ│ñ▐ñ╟ñ¼ suEXEC ñ╬ wrapper ñ╦ñ¬ñ▒ñδÑ╗Ñ¡ÑσÑΩÑ╞ÑúÑΓÑ╟Ñδñ╬╔╕╜α┼¬ñ╩╞░║εñ╟ñ╣íúñΓñª╛»ñ╖╕╖╜┼ñ╦ CGI/SSI └▀╖╫ñ╦ñ─ñññ╞ñ╬┐╖ñ╖ññ└⌐╕┬ñΣ╡¼─Ωñ≥╝ΦñΩ╞■ñ∞ñδñ│ñ╚ñΓñ╟ñ¡ñ▐ñ╣ñ¼íó suEXEC ñ╧Ñ╗Ñ¡ÑσÑΩÑ╞Ñúñ╦├φ░╒ñ╖ñ╞┐╡╜┼ñ╦╛»ñ╖ñ║ñ─│½╚»ñ╡ñ∞ñ╞ñ¡ñ▐ñ╖ñ┐íú </p> <p>ñ│ñ╬Ñ╗Ñ¡ÑσÑΩÑ╞ÑúÑΓÑ╟Ñδñ≥═╤ñññ╞ Ñ╡í╝Ñ╨└▀─Ω╗■ñ╦ñ╔ñ╬ñΦñªñ╦╡÷ñ╣ñ│ñ╚ñ≥└⌐╕┬ñ╣ñδñ½íóñ▐ñ┐íósuEXEC ñ≥┼¼└┌ñ╦└▀─Ωñ╣ñδñ╚ñ╔ñ╬ñΦñªñ╩Ñ╗Ñ¡ÑσÑΩÑ╞Ñú╛σñ╬┤φ╕▒ñ≥╚≥ñ▒ñΘñ∞ñδñ½ñ╦ ┤╪ñ╣ñδñΦñΩ╛▄ñ╖ññ╛≡╩≤ñ╦ñ─ñññ╞ñ╧íó<a href="#jabberwock">"ñ╚ñ½ñ▓ñ╦├φ░╒" (Beware the Jabberwock)</a> ñ╬╛╧ñ≥╗▓╛╚ñ╖ñ╞ñ»ñ└ñ╡ññíú </p> </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div> <div class="section"> <h2><a name="install" id="install">suEXEC ñ╬└▀─Ωñ╚ÑñÑ≤Ñ╣Ñ╚í╝Ñδ</a></h2> <p>ñ│ñ│ñ½ñΘ│┌ñ╖ñ»ñ╩ñΩñ▐ñ╣íú</p> <p><strong>suEXEC └▀─ΩѬÑ╫Ñ╖ÑτÑ≤</strong><br /> </p> <dl> <dt><code>--enable-suexec</code></dt> <dd>ñ│ñ╬ѬÑ╫Ñ╖ÑτÑ≤ñ╧íóÑ╟Ñ╒Ñ⌐ÑδÑ╚ñ╟ñ╧ÑñÑ≤Ñ╣Ñ╚í╝Ñδñ╡ñ∞ñ║íó ═¡╕·ñ╦ñ╧ñ╩ñΘñ╩ññ suEXEC ╡í╟╜ñ≥═¡╕·ñ╦ñ╖ñ▐ñ╣íú suEXEC ñ≥╗╚ñªñΦñªñ╦ APACI ñ╦═╫╡ßñ╣ñδñ╦ñ╧íó<code>--enable-suexec</code> ѬÑ╫Ñ╖ÑτÑ≤ñ╦ñóñ∩ñ╗ñ╞╛»ñ╩ñ»ñ╚ñΓ░∞ñ─ñ╧ <code>--with-suexec-xxxxx</code> ѬÑ╫Ñ╖ÑτÑ≤ñ¼╗╪─Ωñ╡ñ∞ñ╩ñ▒ñ∞ñ╨ñ╩ñΩñ▐ñ╗ñ≤íú</dd> <dt><code>--with-suexec-bin=<em>PATH</em></code></dt> <dd>Ñ╗Ñ¡ÑσÑΩÑ╞Ñú╛σñ╬═²═│ñ╦ñΦñΩíó<code>suexec</code> Ñ╨ÑñÑ╩ÑΩñ╬Ñ╤Ñ╣ñ╧Ñ╡í╝Ñ╨ñ╦ Ñ╧í╝Ñ╔Ñ│í╝Ñ╔ñ╡ñ∞ñ╞ñññδ╔¼═╫ñ¼ñóñΩñ▐ñ╣íúÑ╟Ñ╒Ñ⌐ÑδÑ╚ñ╬Ñ╤Ñ╣ñ≥ ╩╤ñ¿ñ┐ñññ╚ñ¡ñ╧ñ│ñ╬ѬÑ╫Ñ╖ÑτÑ≤ñ≥╗╚ñ├ñ╞ñ»ñ└ñ╡ññíú<em>╬πñ¿ñ╨</em>íó <code>--with-suexec-bin=/usr/sbin/suexec</code> ñ╬ñΦñªñ╦íú</dd> <dt><code>--with-suexec-caller=<em>UID</em></code></dt> <dd>Apache ñ≥─╠╛∩╞░║εñ╡ñ╗ñδ<a href="mod/mpm_common.html#user">ѵí╝Ñ╢╠╛</a>ñ≥╗╪─Ωñ╖ñ▐ñ╣íú ñ│ñ╬ѵí╝Ñ╢ñ└ñ▒ñ¼ suexec ñ╬╝┬╣╘ñ≥╡÷▓─ñ╡ñ∞ñ┐ѵí╝Ñ╢ñ╦ñ╩ñΩñ▐ñ╣íú</dd> <dt><code>--with-suexec-userdir=<em>DIR</em></code></dt> <dd>suEXEC ñ¼ÑóÑ»Ñ╗Ñ╣ñ≥╡÷ñ╡ñ∞ñδѵí╝Ñ╢Ñ█í╝ÑαÑ╟ÑúÑ∞Ñ»Ñ╚ÑΩ╟█▓╝ñ╬ Ñ╡Ñ╓Ñ╟ÑúÑ∞Ñ»Ñ╚ÑΩñ≥╗╪─Ωñ╖ñ▐ñ╣íú ñ│ñ╬Ñ╟ÑúÑ∞Ñ»Ñ╚ÑΩ░╩▓╝ñ╬┴┤╝┬╣╘Ñ╒ÑíÑñÑδñ╧íó"░┬┴┤ñ╩"Ñ╫ÑφÑ░ÑΘÑαñ╦ñ╩ñδñΦñªíó suEXEC ñ¼ñ╜ñ╬ѵí╝Ñ╢ñ╚ñ╖ñ╞╝┬╣╘ñ╟ñ¡ñδñΦñªñ╦ñ╖ñ▐ñ╣íú "├▒╜πñ╩" UserDir Ñ╟ÑúÑ∞Ñ»Ñ╞ÑúÑ╓ñ≥╗╚ñ├ñ╞ñññδ╛∞╣τ (ñ╣ñ╩ñ∩ñ┴ "*" ñ≥┤▐ñ▐ñ╩ñññΓñ╬)íóñ│ñ∞ñ╚╞▒ñ╕├═ñ≥└▀─Ωñ╣ñ┘ñ¡ñ╟ñ╣íú Userdir Ñ╟ÑúÑ∞Ñ»Ñ╞ÑúÑ╓ñ¼ñ╜ñ╬ѵí╝Ñ╢ñ╬Ñ╤Ñ╣Ñ∩í╝Ñ╔Ñ╒ÑíÑñÑδ╞Γñ╬ Ñ█í╝ÑαÑ╟ÑúÑ∞Ñ»Ñ╚ÑΩñ╚╞▒ñ╕╛∞╜Ωñ≥╗╪ñ╖ñ╞ñññ╩ñ▒ñ∞ñ╨íó suEXEC ñ╧┼¼└┌ñ╦╞░║εñ╖ñ▐ñ╗ñ≤íúÑ╟Ñ╒Ñ⌐ÑδÑ╚ñ╧ "public_html" ñ╟ñ╣íú <br /> │╞ UserDir ñ¼░█ñ╩ñ├ñ┐▓╛┴█Ñ█Ñ╣Ñ╚ñ≥└▀─Ωñ╖ñ╞ñññδ╛∞╣τíó ñ╜ñ∞ñΘñ≥┴┤ñ╞░∞ñ─ñ╬┐╞Ñ╟ÑúÑ∞Ñ»Ñ╚ÑΩñ╦┤▐ñßñ╞íó ñ╜ñ╬┐╞Ñ╟ÑúÑ∞Ñ»Ñ╚ÑΩñ╬╠╛┴░ñ≥ñ│ñ│ñ╟╗╪─Ωñ╣ñδ╔¼═╫ñ¼ñóñΩñ▐ñ╣íú <strong>ñ│ñ╬ñΦñªñ╦╗╪─Ωñ╡ñ∞ñ╩ñ▒ñ∞ñ╨ "~userdir" cgi ñ╪ñ╬ÑΩѻѿÑ╣Ñ╚ñ¼╞░║εñ╖ñ▐ñ╗ñ≤íú</strong></dd> <dt><code>--with-suexec-docroot=<em>DIR</em></code></dt> <dd>Apache ñ╬Ñ╔Ñ¡ÑσÑßÑ≤Ñ╚Ñδí╝Ñ╚ñ≥└▀─Ωñ╖ñ▐ñ╣íúñ│ñ∞ñ¼ suEXEC ñ╬╞░║εñ╟╗╚═╤ñ╣ñδ═ú░∞ñ╬Ñ╟ÑúÑ∞Ñ»Ñ╚ÑΩ│¼┴╪ñ╦ñ╩ñΩñ▐ñ╣ (UserDir ñ╬╗╪─Ωñ╧╩╠)íúÑ╟Ñ╒Ñ⌐ÑδÑ╚ñ╟ñ╧ <code>--datedir</code> ñ╦ "/htdocs" ñ╚ñññªÑ╡Ñ╒ÑúÑ├Ñ»Ñ╣ñ≥ñ─ñ▒ñ┐ñΓñ╬ñ╟ñ╣íú "<code>--datadir=/home/apache</code>" ñ╚ñ╖ñ╞└▀─Ωñ╣ñδñ╚íó suEXEC wrapper ñ╦ñ╚ñ├ñ╞ "/home/apache/htdocs" ñ¼Ñ╔Ñ¡ÑσÑßÑ≤Ñ╚Ñδí╝Ñ╚ñ╚ñ╖ñ╞╗╚ñ∩ñ∞ñ▐ñ╣íú</dd> <dt><code>--with-suexec-uidmin=<em>UID</em></code></dt> <dd>suEXEC ñ╬┬╨╛▌ѵí╝Ñ╢ñ╚ñ╖ñ╞╡÷ñ╡ñ∞ñδ UID ñ╬║╟╛«├═ñ≥╗╪─Ωñ╖ñ▐ñ╣íú ┬τ─±ñ╬Ñ╖Ñ╣Ñ╞Ñαñ╟ñ╧ 500 ñ½ 100 ñ¼░∞╚╠┼¬ñ╟ñ╣íú Ñ╟Ñ╒Ñ⌐ÑδÑ╚├═ñ╧ 100 ñ╟ñ╣íú</dd> <dt><code>--with-suexec-gidmin=<em>GID</em></code></dt> <dd>suEXEC ñ╬┬╨╛▌Ñ░Ñδí╝Ñ╫ñ╚ñ╖ñ╞╡÷ñ╡ñ∞ñδ GID ñ╬║╟╛«├═ñ≥╗╪─Ωñ╖ñ▐ñ╣íú┬τ─±ñ╬Ñ╖Ñ╣Ñ╞Ñαñ╟ñ╧ 100 ñ¼░∞╚╠┼¬ñ╩ñ╬ñ╟íó Ñ╟Ñ╒Ñ⌐ÑδÑ╚├═ñ╚ñ╖ñ╞ñΓ 100 ñ¼╗╚ñ∩ñ∞ñ╞ñññ▐ñ╣íú</dd> <dt><code>--with-suexec-logfile=<em>FILE</em></code></dt> <dd>suEXEC ñ╬╜Φ═²ñ╚Ñ¿ÑΘí╝ñ¼╡¡╧┐ñ╡ñ∞ñδÑ╒ÑíÑñÑδ╠╛ñ≥╗╪─Ωñ╖ñ▐ñ╣íú (┤╞║║ñΣÑ╟Ñ╨Ñ├Ñ░╠▄┼¬ñ╦═¡═╤) Ñ╟Ñ╒Ñ⌐ÑδÑ╚ñ╟ñ╧ÑφÑ░Ñ╒ÑíÑñÑδñ╧ "suexec_log" ñ╚ñññª╠╛┴░ñ╟íó ╔╕╜αñ╬ÑφÑ░Ñ╒ÑíÑñÑδÑ╟ÑúÑ∞Ñ»Ñ╚ÑΩ (<code>--logfiledir</code>) ñ╦├╓ñ½ñ∞ñ▐ñ╣íú </dd> <dt><code>--with-suexec-safepath=<em>PATH</em></code></dt> <dd>CGI ╝┬╣╘Ñ╒ÑíÑñÑδñ╦┼╧ñ╡ñ∞ñδ░┬┴┤ñ╩ PATH ┤─╢¡╩╤┐⌠ñ╟ñ╣íú Ñ╟Ñ╒Ñ⌐ÑδÑ╚├═ñ╧ "/usr/local/bin:/usr/bin:/bin" ñ╟ñ╣íú </dd> </dl> <p><strong>suEXEC wrapper ñ╬Ñ│Ñ≤Ñ╤ÑñÑδñ╚ÑñÑ≤Ñ╣Ñ╚í╝Ñδ</strong><br /> <code>--enable-suexec</code> ѬÑ╫Ñ╖ÑτÑ≤ñ╟ suEXEC ╡í╟╜ñ≥═¡╕·ñ╦ñ╣ñδñ╚íó "make" Ñ│Ñ▐Ñ≤Ñ╔ñ≥╝┬╣╘ñ╖ñ┐╗■ñ╦ <code>suexec</code> ñ╬Ñ╨ÑñÑ╩ÑΩ (Apache ╝½┬╬ñΓ) ñ¼╝½╞░┼¬ñ╦║ε└«ñ╡ñ∞ñ▐ñ╣íú <br /> ñ╣ñ┘ñ╞ñ╬╣╜└«═╫┴╟ñ¼║ε└«ñ╡ñ∞ñδñ╚íóñ╜ñ∞ñΘñ╬ÑñÑ≤Ñ╣Ñ╚í╝Ñδñ╦ñ╧ <code>make install</code> Ñ│Ñ▐Ñ≤Ñ╔ñ¼╝┬╣╘ñ╟ñ¡ñ▐ñ╣íúÑ╨ÑñÑ╩ÑΩÑñÑßí╝Ñ╕ñ╬ <code>suexec</code> ñ╧ <code>--sbindir</code> ѬÑ╫Ñ╖ÑτÑ≤ñ╟╗╪─Ωñ╡ñ∞ñ┐Ñ╟ÑúÑ∞Ñ»Ñ╚ÑΩñ╦ÑñÑ≤Ñ╣Ñ╚í╝Ñδñ╡ñ∞ñ▐ñ╣íú Ñ╟Ñ╒Ñ⌐ÑδÑ╚ñ╬╛∞╜Ωñ╧ "/usr/local/apache/sbin/suexec" ñ╟ñ╣íú<br /> ÑñÑ≤Ñ╣Ñ╚í╝Ñδ╗■ñ╦ñ╧ <strong><em>root</em></strong> ╕ó╕┬ñ¼╔¼═╫ñ╩ñ╬ñ╟├φ░╒ñ╖ñ╞ñ»ñ└ñ╡ññíúwrapper ñ¼Ñµí╝Ñ╢ ID ñ≥└▀─Ωñ╣ñδñ┐ñßñ╦íó╜Ω═¡╝╘ <code><em>root</em></code> ñ╟ñ╬Ñ╗Ñ├Ñ╚ѵí╝Ñ╢ ID Ñ╙Ñ├Ñ╚ñ≥ñ╜ñ╬Ñ╒ÑíÑñÑδñ╬ÑΓí╝Ñ╔ñ╦└▀─Ωñ╖ñ╩ñ▒ñ∞ñ╨ñ╩ñΩñ▐ñ╗ñ≤íú </p> <p><strong>░┬┴┤ñ╩Ñ╤í╝Ñ▀Ñ├Ñ╖ÑτÑ≤ñ≥└▀─Ωñ╣ñδ</strong><br /> suEXEC ÑΘÑ├Ñ╤í╝ñ╧íó<code>--with-suexec-caller</code> configure ѬÑ╫Ñ╖ÑτÑ≤ñ╟╗╪─Ωñ╖ñ┐└╡ñ╖ññѵí╝Ñ╢ñ╟╡»╞░ñ╡ñ∞ñ╞ñññδñ│ñ╚ñ≥│╬╟ºñ╖ñ▐ñ╣ñ¼íó Ñ╖Ñ╣Ñ╞Ñα╛σñ╟ñ│ñ╬Ñ┴ѺÑ├Ñ»ñ¼╣╘ñ╩ñ∩ñ∞ñδ┴░ñ╦íó suEXEC ñ¼╕╞ñ╓Ñ╖Ñ╣Ñ╞ÑαñΣÑΘÑñÑ╓ÑΘÑΩñ¼└╚╝σñ╟ñóñδ▓─╟╜└¡ñ╧╗─ñΩñ▐ñ╣íú┬╨╣│║÷ñ╚ñ╖ñ╞íó ░∞╚╠ñ╦╬╔ññ╜¼┤╖ñ╚ñΓñ╡ñ∞ñññ▐ñ╣ñ¼íó Ñ╒ÑíÑñÑδÑ╖Ñ╣Ñ╞ÑαÑ╤í╝Ñ▀Ñ├Ñ╖ÑτÑ≤ñ≥╗╚ñ├ñ╞ Apache ñ╬╝┬╣╘╗■ñ╬Ñ░Ñδí╝Ñ╫ñ╬ñ▀ñ¼ suEXEC ñ≥╝┬╣╘ñ╟ñ¡ñδñΦñªñ╦ ñ╣ñδñ╬ñ¼╬╔ñññ╟ñ╖ñτñªíú</p> <p>ñ┐ñ╚ñ¿ñ╨íó╝íñ╬ñΦñªñ╦Ñ╡í╝Ñ╨ñ¼└▀─Ωñ╡ñ∞ñ╞ñññ┐ñ╚ñ╖ñ▐ñ╣íú</p> <div class="example"><p><code> User www<br /> Group webgroup<br /> </code></p></div> <p><code>suexec</code> ñ¼ "/usr/local/apache2/sbin/suexec" ñ╦ÑñÑ≤Ñ╣Ñ╚í╝Ñδñ╡ñ∞ñ╞ñññ┐╛∞╣τíó╝íñ╬ñΦñªñ╦└▀─Ωñ╣ñδ╔¼═╫ñ¼ñóñΩñ▐ñ╣íú</p> <div class="example"><p><code> chgrp webgroup /usr/local/apache2/bin/suexec<br /> chmod 4750 /usr/local/apache2/bin/suexec<br /> </code></p></div> <p>ñ│ñ∞ñ╟ Apache ñ¼╝┬╣╘ñ╡ñ∞ñδÑ░Ñδí╝Ñ╫ñ╬ñ▀ñ¼ suEXEC ÑΘÑ├Ñ╤í╝ñ≥╝┬╣╘ñ╟ñ¡ñδñ╚ñññªñ│ñ╚ñ≥ │╬╛┌ñ╖ñ▐ñ╣íú</p> </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div> <div class="section"> <h2><a name="enable" id="enable">suEXEC ñ╬═¡╕·▓╜ñ╚╠╡╕·▓╜</a></h2> <p>╡»╞░╗■ñ╦íóApache ñ╧ <code>--sbindir</code> ѬÑ╫Ñ╖ÑτÑ≤ñ╟└▀─Ωñ╡ñ∞ñ┐Ñ╟ÑúÑ∞Ñ»Ñ╚ÑΩñ╟ <code>suexec</code> ñ≥├╡ñ╖ñ▐ñ╣ (Ñ╟Ñ╒Ñ⌐ÑδÑ╚ñ╧ "/usr/local/apache/sbin/suexec") íú ┼¼└┌ñ╦└▀─Ωñ╡ñ∞ñ┐ suEXEC ñ¼ñ▀ñ─ñ½ñδñ╚íó Ñ¿ÑΘí╝ÑφÑ░ñ╦░╩▓╝ñ╬ÑßÑ├Ñ╗í╝Ñ╕ñ¼╜╨╬╧ñ╡ñ∞ñ▐ñ╣íú</p> <div class="example"><p><code> [notice] suEXEC mechanism enabled (wrapper: <em>/path/to/suexec</em>) </code></p></div> <p>Ñ╡í╝Ñ╨╡»╞░╗■ñ╦ñ│ñ╬ÑßÑ├Ñ╗í╝Ñ╕ñ¼╜╨ñ╩ññ╛∞╣τíó ┬τ─±ñ╧Ñ╡í╝Ñ╨ñ¼┴█─Ωñ╖ñ┐╛∞╜Ωñ╟ wrapper Ñ╫ÑφÑ░ÑΘÑαñ¼╕½ñ─ñ½ñΘñ╩ñ½ñ├ñ┐ñ½íó <em>setuid root</em> ñ╚ñ╖ñ╞ÑñÑ≤Ñ╣Ñ╚í╝Ñδñ╡ñ∞ñ╞ñññ╩ñññ½ñ╟ñ╣íú</p> <p>suEXEC ñ╬╗┼┴╚ñ▀ñ≥╗╚═╤ñ╣ñδñ╬ñ¼╜Θñßñ╞ñ╟íóApache ñ¼┤√ñ╦╞░║ε├µñ╟ñóñ∞ñ╨íó Apache ñ≥ kill ñ╖ñ╞íó║╞╡»╞░ñ╖ñ╩ñ▒ñ∞ñ╨ñ╩ñΩñ▐ñ╗ñ≤íúHUP Ñ╖Ñ░Ñ╩ÑδñΣ USR1 Ñ╖Ñ░Ñ╩Ñδñ╦ñΦñδ├▒╜πñ╩║╞╡»╞░ñ╟ñ╧╔╘╜╜╩¼ñ╟ñ╣íú</p> <p>suEXEC ñ≥╠╡╕·ñ╦ñ╣ñδ╛∞╣τñ╧íó<code>suexec</code> Ñ╒ÑíÑñÑδñ≥║∩╜ⁿñ╖ñ╞ñ½ñΘ Apache ñ≥ kill ñ╖ñ╞║╞╡»╞░ñ╖ñ▐ñ╣íú </p> </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div> <div class="section"> <h2><a name="usage" id="usage">suEXEC ñ╬╗╚═╤</a></h2> <p>CGI Ñ╫ÑφÑ░ÑΘÑαñ╪ñ╬ÑΩѻѿÑ╣Ñ╚ñ¼ suEXEC ÑΘÑ├Ñ╤í╝ñ≥╕╞ñ╓ñ╬ñ╧íó <code class="directive"><a href="./mod/mod_suexec.html#suexecusergroup">SuexecUserGroup</a></code> Ñ╟ÑúÑ∞Ñ»Ñ╞ÑúÑ╓ñ≥ ┤▐ñαÑ╨í╝Ñ┴ÑπÑδÑ█Ñ╣Ñ╚ñ╪ñ╬ÑΩѻѿÑ╣Ñ╚ñ½íó<code class="module"><a href="./mod/mod_userdir.html">mod_userdir</a></code> ñ╦ñΦñΩ ╜Φ═²ñ╡ñ∞ñ┐ÑΩѻѿÑ╣Ñ╚ñ╬╛∞╣τñ╦╕┬ñΩñ▐ñ╣íú</p> <p><strong>▓╛┴█Ñ█Ñ╣Ñ╚:</strong><br /> suEXEC wrapper ñ╬╗╚ññ╩²ñ╚ñ╖ñ╞íó <code class="directive"><a href="./mod/core.html#virtualhost">VirtualHost</a></code> └▀─Ωñ╟ñ╬ <code class="directive"><a href="./mod/mod_suexec.html#suexecusergroup">SuexecUserGroup</a></code> Ñ╟ÑúÑ∞Ñ»Ñ╞ÑúÑ╓ñ≥─╠ñ╖ñ┐ñΓñ╬ñ¼ñóñΩñ▐ñ╣íú ñ│ñ╬Ñ╟ÑúÑ∞Ñ»Ñ╞ÑúÑ╓ñ≥ÑßÑñÑ≤Ñ╡í╝Ñ╨ñ╬ѵí╝Ñ╢ ID ñ╚░█ñ╩ñδñΓñ╬ñ╦ñ╣ñδñ╚íóCGI ÑΩÑ╜í╝Ñ╣ñ╪ñ╬ñ╣ñ┘ñ╞ñ╬ÑΩѻѿÑ╣Ñ╚ñ╧íóñ╜ñ╬ <code class="directive"><a href="./mod/core.html#virtualhost"><VirtualHost></a></code> ñ╟╗╪─Ωñ╡ñ∞ñ┐ <em>User</em> ñ╚ <em>Group</em> ñ╚ñ╖ñ╞╝┬╣╘ñ╡ñ∞ñ▐ñ╣íú<code class="directive"><a href="./mod/core.html#virtualhost"><VirtualHost></a></code> ñ╟ñ│ñ╬Ñ╟ÑúÑ∞Ñ»Ñ╞ÑúÑ╓ñ¼╗╪─Ωñ╡ñ∞ñ╞ñññ╩ññ╛∞╣τíó ÑßÑñÑ≤Ñ╡í╝Ñ╨ñ╬ѵí╝Ñ╢ ID ñ¼┴█─Ωñ╡ñ∞ñ▐ñ╣íú</p> <p><strong>ѵí╝Ñ╢Ñ╟ÑúÑ∞Ñ»Ñ╚ÑΩ:</strong><br /> <code class="module"><a href="./mod/mod_userdir.html">mod_userdir</a></code> ñ╦ñΦñΩ╜Φ═²ñ╡ñ∞ñ┐ÑΩѻѿÑ╣Ñ╚ñ╧ ÑΩѻѿÑ╣Ñ╚ñ╡ñ∞ñ┐ѵí╝Ñ╢Ñ╟ÑúÑ∞Ñ»Ñ╚ÑΩñ╬ѵí╝Ñ╢ ID ñ╟ CGI Ñ╫ÑφÑ░ÑΘÑαñ≥ ╝┬╣╘ñ╣ñδñ┐ñßñ╦ suEXEC ÑΘÑ├Ñ╤í╝ñ≥╕╞ñ╙ñ▐ñ╣íú ñ│ñ╬╡í╟╜ñ≥╞░║εñ╡ñ╗ñδñ┐ñßñ╦╔¼═╫ñ╩ñ│ñ╚ñ╧íóCGI ñ≥ñ╜ñ╬ѵí╝Ñ╢ñ╟╝┬╣╘ñ╟ñ¡ñδñ│ñ╚íóñ╜ñ╬Ñ╣Ñ»ÑΩÑ╫Ñ╚ñ¼╛σ╡¡ñ╬<a href="#model">Ñ╗Ñ¡ÑσÑΩÑ╞Ñú╕í║║</a>ñ≥Ñ╤Ñ╣ñ╟ñ¡ñδñ│ñ╚ñ╟ñ╣íú <a href="#install">Ñ│Ñ≤Ñ╤ÑñÑδ ╗■ñ╬ѬÑ╫Ñ╖ÑτÑ≤</a> <code>--with-suexec-userdir</code> ñΓ╗▓╛╚ñ╖ñ╞ñ»ñ└ñ╡ññíú</p> </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div> <div class="section"> <h2><a name="debug" id="debug">suEXEC ñ╬Ñ╟Ñ╨Ñ├Ñ░</a></h2> <p>suEXEC wrapper ñ╧íó╛σ╡¡ñ╟╜╥ñ┘ñ┐ <code>--with-suexec-logfile</code> ѬÑ╫Ñ╖ÑτÑ≤ñ╟╗╪─Ωñ╡ñ∞ñ┐Ñ╒ÑíÑñÑδñ╦ÑφÑ░╛≡╩≤ñ≥╡¡╧┐ñ╖ñ▐ñ╣íú wrapper ñ≥┼¼└┌ñ╦└▀─ΩíóÑñÑ≤Ñ╣Ñ╚í╝Ñδñ╟ñ¡ñ╞ñññδñ╚╗╫ñª╛∞╣τíó ñ╔ñ│ñ╟╠┬ñ├ñ╞ñññδñ½╕½ñΦñªñ╚ñ╣ñδñ╩ñΘñ│ñ╬ÑφÑ░ñ╚Ñ╡í╝Ñ╨ñ╬ Ñ¿ÑΘí╝ÑφÑ░ñ≥╕½ñδñ╚ñΦñññ╟ñ╖ñτñªíú</p> </div><div class="top"><a href="#page-header"><img alt="top" src="./images/up.gif" /></a></div> <div class="section"> <h2><a name="jabberwock" id="jabberwock">ñ╚ñ½ñ▓ñ╦├φ░╒: ╖┘╣≡ñ╚╗÷╬π</a></h2> <p><strong>├φ░╒!</strong> ñ│ñ╬╛╧ñ╧┤░┴┤ñ╟ñ╧ñóñΩñ▐ñ╗ñ≤íúñ│ñ╬╛╧ñ╬║╟┐╖▓■─√╚╟ñ╦ñ─ñññ╞ñ╧íó Apache Ñ░Ñδí╝Ñ╫ñ╬<a href="http://httpd.apache.org/docs-2.0/suexec.html"> ѬÑ≤ÑΘÑñÑ≤Ñ╔Ñ¡ÑσÑßÑ≤Ñ╚</a>╚╟ñ≥╗▓╛╚ñ╖ñ╞ñ»ñ└ñ╡ññíú </p> <p>Ñ╡í╝Ñ╨ñ╬└▀─Ωñ╦└⌐╕┬ñ≥ñΓñªñ▒ñδ wrapper ñ╦ñ─ñññ╞íó ñññ»ñ─ñ½╢╜╠ú┐╝ññ┼└ñ¼ñóñΩñ▐ñ╣íúsuEXEC ñ╦┤╪ñ╣ñδ "Ñ╨Ñ░" ñ≥╩≤╣≡ñ╣ñδ┴░ñ╦ñ│ñ∞ñΘñ≥│╬╟ºñ╖ñ╞ñ»ñ└ñ╡ññíú</p> <ul> <li><strong>suEXEC ñ╬╢╜╠ú┐╝ññ┼└</strong></li> <li>│¼┴╪╣╜┬ññ╬└⌐╕┬ <p class="indent"> Ñ╗Ñ¡ÑσÑΩÑ╞Ñúñ╚╕·╬¿ñ╬═²═│ñ½ñΘíó<code>suEXEC</code> ñ╬┴┤ñ╞ñ╬ÑΩѻѿÑ╣Ñ╚ñ╧ ▓╛┴█Ñ█Ñ╣Ñ╚ñ╪ñ╬ÑΩѻѿÑ╣Ñ╚ñ╦ñ¬ñ▒ñδ║╟╛σ░╠ñ╬Ñ╔Ñ¡ÑσÑßÑ≤Ñ╚Ñδí╝Ñ╚╞Γñ½íó ѵí╝Ñ╢Ñ╟ÑúÑ∞Ñ»Ñ╚ÑΩñ╪ñ╬ÑΩѻѿÑ╣Ñ╚ñ╦ñ¬ñ▒ñδ╕─í╣ñ╬ѵí╝Ñ╢ñ╬║╟╛σ░╠ñ╬ Ñ╔Ñ¡ÑσÑßÑ≤Ñ╚Ñδí╝Ñ╚╞Γñ╦╗─ñΘñ╩ñ▒ñ∞ñ╨ñ╩ñΩñ▐ñ╗ñ≤íú ╬πñ¿ñ╨íó╗═ñ─ñ╬▓╛┴█Ñ█Ñ╣Ñ╚ñ≥└▀─Ωñ╖ñ╞ñññδ╛∞╣τíó ▓╛┴█Ñ█Ñ╣Ñ╚ñ╬ suEXEC ñ╦═¡═°ñ╩ñΦñªñ╦íóÑßÑñÑ≤ñ╬ Apache Ñ╔Ñ¡ÑσÑßÑ≤Ñ╚│¼┴╪ñ╬│░┬ªñ╦┴┤ñ╞ñ╬▓╛┴█Ñ█Ñ╣Ñ╚ñ╬Ñ╔Ñ¡ÑσÑßÑ≤Ñ╚Ñδí╝Ñ╚ñ≥ ╣╜├█ñ╣ñδ╔¼═╫ñ¼ñóñΩñ▐ñ╣íú(╬πñ╧╕σ╞ⁿ╡¡║▄) </p> </li> <li>suEXEC ñ╬ PATH ┤─╢¡╩╤┐⌠ <p class="indent"> ñ│ñ∞ñ≥╩╤╣╣ñ╣ñδñ╬ñ╧┤φ╕▒ñ╟ñ╣íúñ│ñ╬╗╪─Ωñ╦┤▐ñ▐ñ∞ñδ│╞Ñ╤Ñ╣ñ¼ <strong>┐«═Ωñ╟ñ¡ñδ</strong> Ñ╟ÑúÑ∞Ñ»Ñ╚ÑΩñ╟ñóñδñ│ñ╚ñ≥│╬╟ºñ╖ñ╞ñ»ñ└ñ╡ññíú └ñ│ªñ½ñΘñ╬ÑóÑ»Ñ╗Ñ╣ñ╦ñΦñΩíó├»ñ½ñ¼Ñ█Ñ╣Ñ╚╛σñ╟Ñ╚ÑφÑññ╬╠┌╟╧ ñ≥╝┬╣╘ñ╟ñ¡ñδñΦñªñ╦ñ╧ñ╖ñ┐ñ»ñ╩ñññ╟ñ╖ñτñªíú </p> </li> <li>suEXEC Ñ│í╝Ñ╔ñ╬▓■┬ñ <p class="indent"> ╖½ñΩ╩╓ñ╖ñ▐ñ╣ñ¼íó▓┐ñ≥ñΣñφñªñ╚ñ╖ñ╞ñññδñ½╟─░«ñ╗ñ║ñ╦ñ│ñ∞ñ≥ñΣñδñ╚ <strong>┬τñ¡ñ╩╠Σ┬Ω</strong>ñ≥░·ñ¡╡»ñ│ñ╖ñ½ñ═ñ▐ñ╗ñ≤íú ▓─╟╜ñ╩╕┬ñΩ╚≥ñ▒ñ╞ñ»ñ└ñ╡ññíú </p> </li> </ul> </div></div> <div class="bottomlang"> <p><span>Available Languages: </span><a href="./en/suexec.html" hreflang="en" rel="alternate" title="English"> en </a> | <a href="./ja/suexec.html" title="Japanese"> ja </a> | <a href="./ko/suexec.html" hreflang="ko" rel="alternate" title="Korean"> ko </a></p> </div><div id="footer"> <p class="apache">Copyright 1999-2004 The Apache Software Foundation.<br />Licensed under the <a href="http://www.apache.org/licenses/LICENSE-2.0">Apache License, Version 2.0</a>.</p> <p class="menu"><a href="./mod/">ÑΓÑ╕Ñσí╝Ñδ</a> | <a href="./mod/directives.html">Ñ╟ÑúÑ∞Ñ»Ñ╞ÑúÑ╓</a> | <a href="./faq/">FAQ</a> | <a href="./glossary.html">═╤╕∞</a> | <a href="./sitemap.html">Ñ╡ÑñÑ╚Ñ▐Ñ├Ñ╫</a></p></div> </body></html>