[cgiwrap-users] UID from file

[Daniel L. <da...@lo...>]

Hi,

after looking through the cgiwrap sources I got curious why
certain decisions were made.

In particular it's the way how cgiwrap extracts the username under
which the script will be executed. A friend just told me he had
patched cgiwrap to extract the username from the file owner.

So, what's exactly wrong with this? A user cannot chown a file to
another user and configuration would be extremely faciliated.

But it *must* be something wrong with it, otherwise cgiwrap would
work like this by default, right? Is it more error-prone?

Thanks for your help.

Daniel