mod_perl

[btaber]

I have been using mod_perl lately because it speeds things up greatly. Here's the problem. I tried to execute a shell command from within a test script, ie. $me=`pwd`, but it looks like it runs as root, because I can do like ls /var and get everything and read them too. This is BAD, what happens if I get a malicious user on my system? I can't possibly look at everyone's scripts and make sure they are ok.... is there a configuration directive I am missing?

B

 

[danielhozac]

You should be able to read [tt]/var[/tt]. Just make sure that you aren't able to write to the directory. //Daniel