httpd-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Andrew Wilson <and...@www.elsevier.co.uk>
Subject Re: my scoreboard file is world writeable
Date Wed, 02 Aug 1995 20:06:57 GMT
> A further thought on scoreboard file security --- one way to fix this
> would be to put the scoreboard file in $(SERVERROOT)/logs by default, or
> at least to allow people to put it there if they wanted.  Permissions on
> that directory could then prevent mischief from the hoi polloi...
> 
> Is this a show-stopper, or can it wait for TNR?

Question is can people's messing with the scoreboard file compromise the
server.  If people can damage the file and kill the server then we'll end
up on bugraq by the end of the week ;)  That would not be a good thing.

> rst

Ay.


Mime
View raw message