PDA

View Full Version : Can i remove access to Perl CGI?



peterhou
01-06-2005, 04:03 PM
Hi
Can i remove access to Perl CGI from the httpd.conf file?I donn't need these two langs and want to make more security for my server.
Can DA work normal if I disable Perl CGI?and what's the best way to remove access to Perl CGI(whole server)?

Regards
peter

nobaloney
01-06-2005, 04:36 PM
Perl is generally part of the base unix/linux install. Majordomo is written in perl; exim.pl is another. At the very least, if you remove perl from your server email will cease to work.

You can probably disable it from being used inside cgi-bin; I don't remember the details and I don't have time to look it up now, but if you grep /etc/httpd/conf/httpd.conf for cgi-bin you should be able to figure out what you need to comment out.

(Note that you'll have to make changes to your default httpd.conf settings so users can't re-enable it with an .htaccess file.)

Jeff