[Rt-devel] FastCGI, SetGIDness and Taint mode

[Michael S. Liebman]

On Fri, Jun 18, 2004 at 02:23:06PM +0200, Stefan Seiz wrote:
> So how does your Virtual Host Apache Directive (httpd.conf) look for your
> RT-with-SuExec setup?

Apache2/suexec are compiled with -D AP_DOC_ROOT="/opt/rt3".

      SuexecUserGroup rt rt
      FastCgiWrapper /usr/sbin/suexec
      FastCgiIpcDir /var/run/httpd/fastcgi
      FastCgiServer /opt/rt3/bin/mason_handler.fcgi -idle-timeout 3600 -processe
s 4 -init-start-delay 30 -user rt -group rt
      FastCgiConfig -minProcesses 5 -killInterval 120
</IfModule>
NameVirtualHost *:8080
<VirtualHost *:8080>
        ServerName noc-eng-rt:8080

        DocumentRoot /opt/rt3
        AddDefaultCharset UTF-8

        Alias /NoAuth/images /opt/rt3/share/html/NoAuth/images

        <IfModule mod_fastcgi.c>
                AddHandler fastcgi-script fcgi
                ScriptAlias / /opt/rt3/bin/mason_handler.fcgi/
        </IfModule>
</VirtualHost>

/opt/rt3/bin, etc/, and lib/ are owned rt:rt as is /opt/rt3/var/mason_data.

HTH,
Michael
-- 
Michael S. Liebman                      m-liebman at northwestern.edu
                  http://msl521.freeshell.org/
"I have vision and the rest of the world wears bifocals."
        -Paul Newman in "Butch Cassidy & the Sundance Kid"