Re: [cgiwrap-users] UID from file

[Nathan N. <nn...@um...>]

Daniel Lorch wrote:
> 
> Hi,
> 
> after looking through the cgiwrap sources I got curious why
> certain decisions were made.
> 
> In particular it's the way how cgiwrap extracts the username under
> which the script will be executed. A friend just told me he had
> patched cgiwrap to extract the username from the file owner.
> 
> So, what's exactly wrong with this? A user cannot chown a file to
> another user and configuration would be extremely faciliated.

Many platforms do allow giveaway chown. 

> But it *must* be something wrong with it, otherwise cgiwrap would
> work like this by default, right? Is it more error-prone?

It's a multi-level protection. First, files have to be in particular
user's dir, and they have to be owned by that user, and they have to
have appropriate permissions, etc. 

> Thanks for your help.
> 
> Daniel
> 
> _______________________________________________
> cgiwrap-users mailing list
> cgi...@li...
> https://lists.sourceforge.net/lists/listinfo/cgiwrap-users

-- 


------------------------------------------------------------
Nathan Neulinger                       EMail:  nn...@um...
University of Missouri - Rolla         Phone: (573) 341-4841
Computing Services                       Fax: (573) 341-4216