>Is it correct to assume that when I grant a client/virtual >site telnet access, that he can see each and every file on >the server?
No, fortunately this is not the case. Users are placed into groups based on their site (fred:site1, jill:site12 etc.). Although each user could see world-readable files (such as certain configs, some logs etc.), they would not be able to see files where permission has been granted only for a group they are not in. So fred, in my example, would be able to tell that a site12 existed but would not be able to see the files underneath that directory. >So in other words, if I gave shell access to client A, >and client B has an online shop and stores order info in >flat text files, client A would be able to see client B's >order info. Right? Depends on the file permission. If the order file is created with world-readable permission, then the answer is yes. More likely though, the file would be created with group-only readable permissions which makes the answer no. >If this is correct, is there any solution for this? Ensure the file's permissions are correct. Try 'man chmod' from the command prompt for more information. Cheers, Ian _______________________________________________ cobalt-developers mailing list [EMAIL PROTECTED] http://list.cobalt.com/mailman/listinfo/cobalt-developers
