Return-Path: Delivered-To: apmail-httpd-users-archive@httpd.apache.org Received: (qmail 67942 invoked by uid 500); 3 Jul 2002 12:08:22 -0000 Mailing-List: contact users-help@httpd.apache.org; run by ezmlm Precedence: bulk Reply-To: users@httpd.apache.org list-help: list-unsubscribe: list-post: Delivered-To: mailing list users@httpd.apache.org Received: (qmail 67930 invoked from network); 3 Jul 2002 12:08:22 -0000 Received: from mail6.burlee.com (199.93.70.32) by daedalus.apache.org with SMTP; 3 Jul 2002 12:08:22 -0000 Received: from velociraptor.4lane.com [12.34.105.10] by mail6.burlee.com (SMTPD32-6.00) id A93516B2025E; Wed, 03 Jul 2002 08:08:21 -0400 Received: from no.name.available by velociraptor.4lane.com via smtpd (for mail6.burlee.com [199.93.70.32]) with SMTP; 3 Jul 2002 12:09:30 UT Subject: Re: file's permissions in cgi From: Lee Fellows To: users@httpd.apache.org In-Reply-To: <002801c2220b$11f79ca0$cf02410a@info207> References: <002801c2220b$11f79ca0$cf02410a@info207> Content-Type: text/plain Content-Transfer-Encoding: 7bit X-Mailer: Evolution/1.0.2 Date: 03 Jul 2002 08:07:16 -0400 Message-Id: <1025698036.1578.32.camel@lfellows> Mime-Version: 1.0 X-Spam-Rating: daedalus.apache.org 1.6.2 0/1000/N On Tue, 2002-07-02 at 16:56, Mauricio wrote: > Hi for all. > When a user run a cgi, he execute as "others". > Then I have a file .cgi with the permissions: > r_xr_xr_x > The problem is that anyone user that log in server using telnet can to execute this file. > Can anyone help me? > > Mauricio > +55 - (041) - 219-5246 > mandrade@pr.gov.br Hi Mauricio, What exactly is the concern? Whether they can execute it from a browser, or from the command line, would seem irrelevent. You say they are executing it as the group 'others'? Not in a usual apache installation. Normally apache would execute it as its user or group which varies from installation to installation, but user nobody and group nobody are common. --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org For additional commands, e-mail: users-help@httpd.apache.org