Date: 2009jun1
Platform: Apache
Language: Server Side Include (SSI)
Q. My Apache error log says "[Mon Jun 01 12:19:16 2009] [error] [client 1.2.3.4] exec used but not allowed in /example/myfile.shtml, ..."
How can fixed this?
A. Sounds like you have a Server Side Include (.shtml) file that is doing
this:
<!--#exec cmd="./myprogram"-->
For this to be allowed you need:
Options -IncludesNoExec
in your /etc/httpd/conf/httpd.conf file.
Or the /etc/httpd/conf.d/mysite.conf file.
Notice that this directive is a double negative. Its saying
"not not exec" which means "exec" is allowed.
Of course, allowed exec has big security issues so you should only
enable this directive in the parts of your site whre its absolutely
needed.