apache suexec "command not in docroot"

Question

Error message is:

command not in docroot (/home/site1/cgi-bin/test.pl).

Here I found this:

suexec requires the CGI script to be under the server's DocumentRoot (not the VirtualHost DocumentRoot). It is permitted, however, for the VirtualHost DocumentRoot to be a symlink to a directory that appears under the real DocumentRoot.

a part of virtual host config is:

[...]
DirectoryIndex index.html index.html index.php
DocumentRoot /home/site1/htdocs

SuexecUserGroup site1 site1

ScriptAlias /cgi-bin/ /home/site1/cgi-bin/
<Location /home/site1/cgi-bin>
           Options +ExecCGI
</Location>

<Directory /home/site1/>
Options -Includes -Indexes -FollowSymLinks +ExecCGI MultiViews
AddHandler cgi-script .cgi .pl
AllowOverride none
Order allow,deny
Allow from all
</Directory>
[...]

So, I prefer have Perl scripts inside cgi-bin, but if I can't resolve this problem I can move all scripts to htdocs.

Thraidh · Accepted Answer · 2016-11-25T16:15:54.730

20

suEXEC has its own docroot which is totally independent of whatever you configure in your Apache config. You can see what suEXEC's docroot is by calling:

suexec -V

You may need to be root for that. In my case the docroot was /var/www. You'll have to put your scripts there. There is no way to change this save recompiling suEXEC. Don't try to use symbolic links to keep your scripts outside of /var/www (or whatever your suEXEC is configured to).

Edit: as mentioned by @insaner in the comments the command is probably suexec or as I have seen on at least one server suexec2. suEXEC is just what the Apache documentation calls the module/feature.

edited Nov 25 '16 at 16:15

answered Sep 30 '13 at 16:21

Thraidh

670
5
11

4

The package `apache2-suexec-custom` allows for more flexibility. – Michaël Jan 08 '15 at 10:26
Excelent. Exactly what I was looking for. – Saied_Delshad Jun 01 '15 at 10:13
Fantastic! I was using a symlink which unfortunately doesn't work. – Farzad Abdolhosseini May 02 '18 at 20:39
Check that docroot directory exist. for example if your docroot is "/home" , /home directory must exist. and you can run commands in /home1 /home2 and ... – Ehsan Chavoshi Sep 18 '18 at 17:04

score 2 · Answer 2 · answered Aug 03 '20 at 05:19

There is a config in /etc/apache2/suexec/www-data with below first 2 lines if you are using apache2-suexec-custom package.

/var/www
public_html/cgi-bin

You need to replace those lines with your setup. There SHOULD be 2 lines. Giving only one line will through error.

I used something like below,

home
cgi-bin

score -4 · Answer 3 · edited Mar 08 '14 at 20:37

-4

Change DocumentRoot /home/site1/htdocs to DocumentRoot /home/site1/

edited Mar 08 '14 at 20:37

Saro Taşciyan

5,210
5
31
50

answered Sep 26 '13 at 13:09

user1126070

5,059
1
16
15

apache suexec "command not in docroot"

3 Answers3