From: Freddie C. <fca...@sd...> - 2005-03-08 22:36:20
|
On March 8, 2005 02:24 pm, Jamie Cameron wrote: > On Wed, 2005-03-09 at 07:06, Freddie Cash wrote: > > I'm running Webmin 1.180 on RedHat Linux 7.1. > > > > I've got various webmin groups configured to give different levels > > of access to different users. One of these groups only has access > > to the File Manager module. > > > > In the Webmin Users module, I've edited the settings for the File > > Manager module, in the various groups. One of these groups has the > > chroot directory set to /home, and the allowed directories set to / > > (which would be /home, as it's relative to the chroot). > > > > When I login as a user in that limited group, and start the File > > Manager, I have full access to the entire harddrive of the server. > > > > Previous versions of the File Manager (last one I checked was > > 1.000) would only show the chroot directory (/home). > > > > Am I misinterpreting the config, or is this a bug in the File > > Manager's config parsing? > This is a bug in the file manager module, that happens only if you > are using the chroot feature, but don't have it setup to access files > as a non-root Unix user. The 1.190 release will be coming out soon, > so I will include a fix for it in that version .. Aha! So root's all-powerfullness even allows it to break out of the chroot. Go root! :) I'll wait patiently until the fix is in, then. Thanks. -- Freddie Cash, CCNT CCLP Helpdesk / Network Support Tech. School District 73 (250) 377-HELP [377-4357] fca...@sd... |