Date: Thu, 2 Apr 1998 11:23:50 -0800 From: "David Shanes" <dshanes@personalogic.com> To: <freebsd-questions@FreeBSD.ORG>, "chas" <panda@peace.com.my> Subject: Re: How can CGI script execute root commands or edit root-owned files ? Message-ID: <01ae01bd5e6c$df49da40$1d43a8c0@shanes.personalogic.com>
next in thread | raw e-mail | index | archive | help
If you do, make sure that you execute chroot so that users do not have access to too much of your computer. David _____________________________________________________ David Shanes 7535 Metropolitan Drive dshanes@personalogic.com San Diego, CA 92108 Database Developer (619) 220-5800 x228 PersonaLogic, Inc. (619) 220-5899 (fax) http://www.PersonaLogic.com -----Original Message----- From: chas <panda@peace.com.my> To: freebsd-questions@FreeBSD.ORG <freebsd-questions@FreeBSD.ORG> Date: Thursday, April 02, 1998 11:23 AM Subject: How can CGI script execute root commands or edit root-owned files ? >Since a CGI script is executed with Nobody's (the web >server's) privilegies, how it can run Administrator >commands like useradd ? > >One suggestion I've had was running the webserver >as root but this seems to be considered >not a good thing by and large. I was just looking >at updating user records and DNS records in such >a manner. > >Cheers, > >Chas > >To Unsubscribe: send mail to majordomo@FreeBSD.org >with "unsubscribe freebsd-questions" in the body of the message To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?01ae01bd5e6c$df49da40$1d43a8c0>