https://github.com/matsumotory/mod_process_security

mod_process_security is an access control module for CGI and DSO. Improvement of mod_ruid2(vulnerability) and mod_suexec(performance).
https://github.com/matsumotory/mod_process_security

Last synced: about 2 months ago
JSON representation

mod_process_security is an access control module for CGI and DSO. Improvement of mod_ruid2(vulnerability) and mod_suexec(performance).

• Host: GitHub
• URL: https://github.com/matsumotory/mod_process_security
• Owner: matsumotory
• Created: 2012-04-25T03:02:05.000Z (over 12 years ago)
• Default Branch: master
• Last Pushed: 2022-07-05T09:03:35.000Z (over 2 years ago)
• Last Synced: 2024-10-18T18:28:30.412Z (3 months ago)
• Language: C
• Homepage: https://ieeexplore.ieee.org/abstract/document/6305278?section=abstract
• Size: 107 KB
• Stars: 23
• Watchers: 10
• Forks: 11
• Open Issues: 6
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

README

        
# mod_process_security [![Build Status](https://travis-ci.org/matsumotory/mod_process_security.svg?branch=master)](https://travis-ci.org/matsumotory/mod_process_security) [![Build Status](https://github.com/matsumotory/mod_process_security/workflows/test/badge.svg?branch=master)](https://github.com/matsumotory/mod_process_security/actions?query=workflow%3Atest)

This module is a suEXEC module for CGI and DSO. Improvement of mod_ruid2(vulnerability) and mod_suexec(performance).

See also http://blog.matsumoto-r.jp/?p=1972

## How To Compile

- build

```

apxs -i -c -l cap mod_process_security.c

```

- Add to httpd.conf or conf.d/process_security.conf

```

LoadModule process_security_module   modules/mod_process_security.so

PSExAll On

```

## How To Use

* Set Enable All Extensions On. (default Off)

```

PSExAll On

```

* Set Enable ALL CGI Extensions On. (default Off)

```

PSExCGI On

```

* [Optional] Set Enable Custom Extensions. (unset PSExAll)

```

PSExtensions .php .pl .py

```

* [Optional] Set Enable Custom Handlers. (unset PSExAll)

```

PSHandlers application/x-httpd-php hoge-script

```

* [Optional] Set Ignore Custom Extensions.

```

# .html and .css were ignored

PSExAll On

PSIgnoreExtensions .html .css

```

* [Optional] Minimal uid and gid. (default uid:100 gid:100)

```

PSMinUidGid 200 200

```

* [Optional] Default uid and gid. (default uid:48 gid:48)

```

PSDefaultUidGid

```

* [Optional] Enable run with root permission (default Off)

```

PSRootEnable On

```

# License

under the MIT License:

* http://www.opensource.org/licenses/mit-license.php