problem with suexec

[Hendrik Bäcker]

Hi Wilson,

Wilson Galafassi schrieb:
> hello.
> i have installed nagios on my server running apache 2.2.6.
> 
> when i try to access the web interface i see: Internal Server Error
> 
> in error_log i see:
> [Tue Mar 11 21:20:15 2008] [error] [client xxx.yyy.zzz.xxxx] suexec
> policy violation: see suexec log for more details, referer:
> http://www.digitalstorage.com.br/nagios/side.html
> [Tue Mar 11 21:20:15 2008] [error] [client xxx.yyy.zzz.xxxx] Premature
> end of script headers: tac.cgi, referer:
> http://www.digitalstorage.com.br/nagios/side.html
> [Tue Mar 11 21:20:15 2008] [error] [client xxx.yyy.zzz.xxxx] File does
> not exist: /home/digital/public_html/500.shtml, referer:
> http://www.digitalstorage.com.br/nagios/side.html
> 
> in suexec_log:
> [2008-03-11 21:22:04]: uid: (32042/digital) gid: (32044/32044) cmd: tac.cgi
> [2008-03-11 21:22:04]: directory is writable by others: (/usr/local/nagios/sbin)
> 
Well, did you begin to re-set the permissions?
I don't know suexec in depth but in your situation I would start to try 
to do what suexec suggests. After each step I would control if the 
balance between application and security is givven.

So like your suexec_log: change the directory permission of 
"/usr/local/nagios/sbin" to make it not writable by "other" (chmod o-w 
/usr/local/nagios/sbin)

Regards
Hendrik

-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null