Force run as root

[dr_seus]

Hello,

Is it possible to force run as root?
I'm testing Litespeed in a very special custom OS simulating an embedded environment and I need to be able to run it as root as the webserver need to execute commands as root in the OS.

Cheers,
henke

 

[mistwang]

No, it is not possible for security reason. You can have to use "Set UID" CGI to do that.

 

[dr_seus]

Thanks for the quick reply!

OK, but as I understand it you can only use UIDs above 10, correct?

Cheers

 

[mistwang]

LiteSpeed will not start any CGI with UID less than 10, but a Set UID CGI will change it UID to the UID of the owner of the file after it starts. make sure to let LiteSpeed allowing Set UID CGI.

 

[dr_seus]

Ahh OK so this warning message is just a warning. The commands will still be executed by the user owning the /application/public correct?

[config:vhost:testserver] Uid of /application/public/ is smaller than minimum requirement 11, use server uid!

 

[mistwang]

No. It does not.
You should not let root own the document root.
Only the CGI that need to executed as root should be owned by root with SetUID bit set.
LSWS will not start any CGI process as root, period.
However, a SetUID process will change the user id to who own the file by itself.