From: Devin Bayer <mal0rd@...>
Date: 2002-01-27T04:53:16+09:00
Subject: Eruby with different uid

Hi.  I am trying to setup a free public webserver where users can use 
arbitrary CGI and eruby scripts.  It's using Apache on Linux.  By 
default all scripts run as user 'www-data'.  This means one user could 
alter the files of another user because they are all owned by the same 
person.  For CGI scripts I setup SuExec to use the corresponding UID for 
  user's scripts.

What can I do for eruby?  I want all scripts to be run with an effective 
uid that is equal whomever's home dir contains the script.  If it could 
do all the same security checks as SuExec that would be nice, but not 
required.



Does anyone have any suggestions or pointers.  Or maybe another way for 
users to each have their own CGI/eruby scripts that can't interfere.

--
Devin Bayer