[Discuss] cgi-bin

[smallm at panix.com (Mike Small)]

dan moylan <jdm at moylan.us> writes:

> mike small wrote:
>> Could /var have been mounted noexec in the new version?
>
> don't think so:
>     moylan 2013[547] ll -d /var
>        drwxr-xr-x 15 root root 4.0K 131207:0941 /var/
>     moylan 2013[548] ll -d /var/www
>        drwxr-xr-x 3 root root 4.0K 131211:1726 /var/www/
>     moylan 2013[549] ll -d /var/www/cgi-bin
>        drwxr-xr-x 2 root root 4.0K 131211:1723 /var/www/cgi-bin/

Not sure that shows it. Try typing mount with no arguments, see if it
has a noexec option flag for var.

For instance on my system (which isn't Linux but still) I remounted /var
noexec and still see x on the directories. After all, x doesn't exactly
mean execute for directories:

$ mount | grep var
/dev/wd0e on /var type ffs (local, nodev, noexec, nosuid, softdep)

$ ls -ld /var/www/cgi-bin
drwxr-xr-x  2 root  daemon  512 Nov 29 13:10 /var/www/cgi-bin/

$ ls -l /var/www/cgi-bin  
total 292
----------  1 root  bin  144592 Jul 30 17:15 bgplg
----------  1 root  bin     268 Jul 30 17:14 printenv
----------  1 root  bin     757 Jul 30 17:14 test-cgi


-- 
Mike Small
smallm at panix.com