[Mono-list] mod_mono in combination with UserDirs and mod_suid/mod_ruid

[Erik van Pienbroek]

Hi,

I'm currently in the process of setting up a new webserver
for a school. The goal of it is that every user has its own
webspace and can put PHP scripts in it. As we want to prevent
abuse of the server while not limiting the users in functionality
(thus leaving the safe mode from PHP off) we have used a apache
module called mod_ruid which alters the permissions of the
apache process for each HTTP request so that PHP scripts are
executed with the right permissions. We use UserDir's instead of
vhosts in this setup as we want to keep the webserver as dynamic
as possible without too much maintaining fuss.

We have had several requests from users to add ASP.NET support
to this webserver, but I'm having a hard time getting mod_mono
to work. What I want is that for each request the mono/xsp process
gets started with the permissions of the user who owns the
ASP script. I've noticed that mod_mono uses unix domain sockets
to send requests to a central mono/xsp process which runs with
the permissions of the apache server. Now I'm wondering if it
is possible to integrate xsp in mod_mono so that the right
permissions are used for each http request.

Can somebody give me some hints regarding this setup?

Thanks in advance,

Erik van Pienbroek