On 2006-01-10 1257, Mauro Sanna wrote: > Hello. > My users connect via a samba server to their home directories and to a > develop directory that is /home/develop. > Then they copy all the data from /home/develop to /var/www/final. > Now they want to connect directly to /var/www/final to avoid the copy. > Can I share /var/www/final with samba or it can be a security problem?
Well. It could be a security ``risk'', in the sense that it would be possible for your developers to put up files, that trigger an exploit of your httpd (and the parsers it may feature), and thereby gain control of your system. However, that would be directly malicious from your users, and you'd be having a lot of other concerns if you were to counter such hostility. If I understand you correctly, you migrate from having your users commit into their homedirs and then commiting that into the final-dir, to having them commit directly into the final-dir. That might be dangerous, as your developers may more easily override already-correct files. As I see it, you could go ahead with your plan as is, bearing in mind that it is sub-optimal. You could attempt a remedy on your current scheme, and have a cronjob copy the data of /home/develop to /var/www/final every night or the like. If you go with this approach, you really shold keep a backup of the final-dir, at least a week back. But, as another poster pointed out, your developers would be better off learning to use CVS, or rather, subversion. Those are fully-fledged systems for collaborating on source code and the likes. Regards, Anders Breindahl. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
