Re: [hylafax-users] How do I get apache to run sendfax?

[Onur Can ÇAKMAK <onur@uzem.itu.edu.tr>]

Hi,

I think something's wrong with your web server/php configuration. What is
error exactly you get?
Running sendfax as nobody would not cause any problem.
Here is a try-out for nobody user:

root@darkstar:~# su nobody
nobody@darkstar:/root$ sendfax -d 05336481789 /etc/hosts
request id is 22 (group id 22) for host localhost (1 file)
...
nobody@darkstar:/root$ faxrm 22
Job 22 removed.

and executing with a pipe like "raj" did would not cause any security
problems (if I didn't miss anything).

But if I were you I'd made php/cgi script to put the file to a temproary
file and execute "sendfax -d Dest .... /some/temp/dir/temp.123124.file"

Regards..

Onur Can ÇAKMAK
Istanbul Technical University
Distant Learning Center


----- Original Message ----- 
From: "raj" <raj@tao.ca>
To: "Lee Howard" <faxguy@howardsilvan.com>
Cc: "Thayne Saiger" <thayne.saiger@magharl.co.uk>;
<hylafax-users@hylafax.org>
Sent: Tuesday, July 08, 2003 6:07 PM
Subject: Re: [hylafax-users] How do I get apache to run sendfax?


> Hi all,
>
> I don't know if this is safer, but I've done the following:
>
> 1) for my needs, I made a perl script that actually calls sendfax as
>    follows:
>
> ---------------------------------
>    open(SENDFAX, "|/usr/bin/sendfax -n -d 5551212" );
>    print SENDFAX "This is what I want to send\n";
>    close(SENDFAX);
> ---------------------------------
>
> 2) the perl script has the following permissions:
>
>    "-rwx--s--x    1 root     nobody"
>
>    which would allow the apache process to execute the script
>
> 3) this script is called from the CGI script
>
> I don't know with %100 certainly that this is safe though. Any ideas?
> Thanks !
>
> --Raj
>
>
> On Tue, 8 Jul 2003, Lee Howard wrote:
>
> > On 2003.07.08 05:43 Thayne Saiger wrote:
> > > Hi,
> > >
> > > I am using hylafax to send faxes with a website by creating a PDF. The
> > > trouble I am having is that the sendfax command wont run. I can run
> > > other
> > > commands i.e. whereis and get a result on screen, and I can send faxes
> > > on
> > > the command prompt but the same command won't run in apache, what
> > > permissions do I change to allow apache to run the sendfax command?
> >
> > I've encountered this kind of problem before and discovered that Apache
> > (PHP) was launching the command in too restrictive of a shell,
> > especially with regards to paths, and I had to adjust this.
> >
> > Lee.
> >
> > ____________________ HylaFAX(tm) Users Mailing List
_______________________
> >   To subscribe/unsubscribe, click
http://lists.hylafax.org/cgi-bin/lsg2.cgi
> >  On UNIX: mail -s unsubscribe hylafax-users-request@hylafax.org <
/dev/null
> >   *To learn about commercial HylaFAX(tm) support, mail
sales@hylafax.org.*
> >
>
>
>
> ____________________ HylaFAX(tm) Users Mailing List
_______________________
>   To subscribe/unsubscribe, click
http://lists.hylafax.org/cgi-bin/lsg2.cgi
>  On UNIX: mail -s unsubscribe hylafax-users-request@hylafax.org <
/dev/null
>   *To learn about commercial HylaFAX(tm) support, mail sales@hylafax.org.*
>
>


____________________ HylaFAX(tm) Users Mailing List _______________________
  To subscribe/unsubscribe, click http://lists.hylafax.org/cgi-bin/lsg2.cgi
 On UNIX: mail -s unsubscribe hylafax-users-request@hylafax.org < /dev/null
  *To learn about commercial HylaFAX(tm) support, mail sales@hylafax.org.*