> apache's SUexec since it would try to run the .cgi as a user that doesnt 
> really exist. I was thinking it might be possible to chroot apache and 

Create real users.  Its the only way to take use of the security models
that many have made for doing these things.

Ignore my other message then :)

-- 
Scott Dier <dieman at ringworld.org> <sdier at debian.org>
http://www.ringworld.org/  #linuxos at irc.openprojects.net