httpd-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Rob Hartill <r...@imdb.com>
Subject Why /etc/spwd.db access? (fwd)
Date Fri, 10 May 1996 15:11:00 GMT

not acked


From: Tadej Vodopivec <Tadej.Vodopivec@zaslon.si>
Message-Id: <199605101303.PAA14004@moon.zaslon.si>
Subject: Why /etc/spwd.db access?
To: apache-bugs@apache.org
Date: Fri, 10 May 1996 15:03:22 +0200 (MET DST)
X-Mailer: ELM [version 2.4 PL24]
Content-Type: text

Hi,

I find appache overall great, but I encounter one security related weakness
regarding the BSDI's BSD/OS and apache 1.1b2: When I start it chrooted, it
wants /etc/spwd.db (with passwords) to reside in chrooted area; I see no
actual need for /etc/spwd.db, as /etc/pwd.db (no passwords) would be enough.
Has anyone met this problem before?

	Best regards,
	  Tadej

                ZASLON d.o.o.  Tadej Vodopivec, Podlimbarskega 44, 
 ----------------------------  SI 1000 Ljubljana, Slovenia
       information technology  tel: +386 (0)61 159 34 25
                               fax: +386 (0)61 159 51 48
                               e-mail: tadej.vodopivec@zaslon.si
----- End of forwarded message from Tadej Vodopivec -----

-- 
Rob Hartill (robh@imdb.com)
The Internet Movie Database (IMDb)  http://www.imdb.com/
           ...more movie info than you can poke a stick at.

Mime
View raw message