[cobalt-security] CGI and root

["John Parris" <jparris@xxxxxxxxxxxxxx>]

I have a customer that needed a program called Pennywize installed. Part of
the installation 'requires' the following line in the httpd.conf:

CustomLog "| /home/sites/siteXX/web/cgi-bin/pennywize.cgi"
"%h|%u|%s|customer"



I've noticed that this causes the pennywize.cgi file to run as root. My
question is, is there a way to make the CGI run as the admin user of the
site, as nobody, or using cgiwrap? Having a CGI run as root is making me
nervous.

Someone please respond and please copy me at jparris@xxxxxxxxxxxxxx as it
gets hard to keep track of all the messages coming into this mailing list.


Thanks
John