Re: CGI Scripts and Permissions

• To: www-security@ns2.rutgers.edu
• Subject: Re: CGI Scripts and Permissions
• From: Mike Dilworth <mjd@soi.city.ac.uk>
• Date: Wed, 13 Mar 1996 17:00:39 -0200
• Hops: 0
• Host: ns2.rutgers.edu.
• Posted-Date: Wed, 13 Mar 1996 17:00:39 -0200

At 10:57 AM 3/12/96 +0000, KGANNON@dit.ie wrote:
>If these question has been asked before excuse me I am new to the game.
>
>Has anyone had problems where they run all scripts as NOBODY (or something
along those lines) and users start a war deleting each others databases,kill
>processes etc.
>
well not quite...no wars I mean..make them write setguid scripts.  I use
perl, and do this by setting the environment in which it runs..along with
using the sticky bit on the file, chmod u+s  . the script then runs as the
user and not nobody.


hope this helps..


mike
Michael J. Dilworth		Dept. Information Science
				City University
				London, UK.
http://web.is.city.ac.uk/Home/mjd/Homepage.htm

• Previous: Re: CGI Scripts and Permissions
• Next: Re: Java "security holes'
• Index(es):
  • Index
  • Thread