Re: [cgiwrap-users] Re: cgiwrap

[Ralph H. <rj...@mo...>]

x wrote:
> 
> From the docs on the ftp site, it appears that cgiwrap is mostly for
> servers hosting cgi scripts of outsiders.
> 
> If I run my own server and I am the sole author of all scripts running
> on the server, is there any argument for the use of cgiwrap?

Yes. Your scripts can write to files owned by you (not by httpd user
nobody). The files - and the dirs they reside in - can be mode 700, making
your data far more private and secure than if you had to use mode 777 to
accomodate the unprivileged user nobody.

I suppose if you are the *only* one on the box, having world-writable
files and dirs may not bother you, but it still makes me uncomfortable.
It's one of the main reasons I like cgiwrap.	-=r=-