[Discuss] cgi-bin

[jdm at moylan.us (dan moylan)]

mike small wrote:
> dan moylan <jdm at moylan.us> writes:

> > mike small wrote:
> >> Could /var have been mounted noexec in the new version?
>
> > don't think so:
> >     moylan 2013[547] ll -d /var
> >        drwxr-xr-x 15 root root 4.0K 131207:0941 /var/
> >     moylan 2013[548] ll -d /var/www
> >        drwxr-xr-x 3 root root 4.0K 131211:1726 /var/www/
> >     moylan 2013[549] ll -d /var/www/cgi-bin
> >        drwxr-xr-x 2 root root 4.0K 131211:1723 /var/www/cgi-bin/

> Not sure that shows it. Try typing mount with no arguments, see if it
> has a noexec option flag for var.

> For instance on my system (which isn't Linux but still) I remounted /var
> noexec and still see x on the directories. After all, x doesn't exactly
> mean execute for directories:

> $ mount | grep var
> /dev/wd0e on /var type ffs (local, nodev, noexec, nosuid, softdep)

> $ ls -ld /var/www/cgi-bin
> drwxr-xr-x  2 root  daemon  512 Nov 29 13:10 /var/www/cgi-bin/

> $ ls -l /var/www/cgi-bin
> total 292
> ----------  1 root  bin  144592 Jul 30 17:15 bgplg
> ----------  1 root  bin     268 Jul 30 17:14 printenv
> ----------  1 root  bin     757 Jul 30 17:14 test-cgi

hmmmm...

moylan 2013[515] ls -l /var/www/cgi-bin
total 4
-rwxr-xr-x 1 root root 511 131211:1723 welcome.cgi*

moylan 2013[518] mount | grep var
moylan 2013[519]

ole dan

j. daniel moylan
84 harvard ave
brookline, ma 02446-6202
617-232-2360 (tel)
jdm at moylan.us
www.moylan.us
[avoid html waste.]