Apache HTTP Server Version 2.2
This document refers to a legacy release (2.2) of Apache httpd. The active release (2.4) is documented here. If you have not already upgraded, please follow this link for more information.
You may follow this link to go to the current version of this document.
¾ÆÆÄÄ¡ À¥¼¹ö´Â CGI ÇÁ·Î±×·¥À» ½ÇÇàÇϱâ Àü¿¡ ´Ù¸¥ »ç¿ëÀÚ·Î
ÀüȯÇϱâÀ§ÇØ suexec
¸¦ »ç¿ëÇÑ´Ù. À̸¦ »ç¿ëÇÏ·Á¸é
¼¹ö¸¦ root
°èÁ¤À¸·Î ½ÇÇàÇØ¾ß ÇÑ´Ù. º¸Åë À¥
µ¥¸óÀ» root
°èÁ¤À¸·Î ½ÇÇàÇÏÁö ¾Ê±â¶§¹®¿¡
suexec
½ÇÇàÆÄÀÏ¿¡ setuid ºñÆ®¸¦ ¼³Á¤ÇÏ°í
root
°¡ ¼ÒÀ¯ÁÖÀ̾î¾ß ÇÑ´Ù. root
ÀÌ¿ÜÀÇ
´Ù¸¥ »ç¿ëÀÚ°¡ ¾²±â±ÇÇÑÀ» °¡Áö¸é ¾ÈµÈ´Ù.
suexecÀÇ °³³ä°ú º¸¾È¸ðµ¨¿¡ ´ëÇÑ Á¤º¸´Â suexec ¹®¼¸¦ (http://httpd.apache.org/docs/2.2/suexec.html) Âü°íÇ϶ó.
suexec -V
-V
root
°¡ ½ÇÇàÇϸé suexec
ÀÇ ÄÄÆÄÀÏ
¿É¼ÇÀ» Ãâ·ÂÇÑ´Ù. º¸¾È»ó ÀÌÀ¯·Î ¸ðµç ¼³Á¤¿É¼ÇÀº ÄÄÆÄÀÏÇÒ ¶§¸¸
ÁöÁ¤ÇÒ ¼ö ÀÖ´Ù.