Local file security (in 1.27)

2002-08-01 Thread Joel Palmius
I'm developing an online survey system under mod_perl (with a homemade perlhandler, not under Apache::Registry). Since I've had as a goal to avoid as many dependencies as possible, I store results in local plaintext files. By nature, these files has (?) to be writable by the uid apache runs as.

Re: Local file security (in 1.27)

2002-08-01 Thread Stas Bekman
[...] So, question is: How do I protect my data files from being accessed by anything else than my own perlhandler? Can I set another uid for all that has to do with my specific perlhandler? Hints are most welcome. You can't. The only solution is run a dedicated server for each user.

Re: Local file security (in 1.27)

2002-08-01 Thread Kari Nurmela
So, question is: How do I protect my data files from being accessed by anything else than my own perlhandler? Can I set another uid for all that has to do with my specific perlhandler? Hints are most welcome. // Joel Maybe you are facing the same problem, that I asked earlier in this