Re: Apache: limiting the execution place

2003-06-20 Thread Todd Troxell
On Mon, Jun 16, 2003 at 04:39:45PM +0300, Nebi Gurbanov wrote: What I want to do is preventing one user from getting into another user's home directory and reading his/her files . Has anybody ever made a design that does the thing I want to have !? You might want to look into

Re: Apache: limiting the execution place

2003-06-18 Thread exon
No misunderstanding from you, but sort of one for me. Sorry about that. Still though, I can't quite see the reason for hindering other users to see the script code. Only local users can read them in 'raw' format. Unless ofcourse there are some copyright issues here, or there are 'hardcoded' (as

Re: Apache: limiting the execution place

2003-06-18 Thread Tim Greer
From: exon [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Wednesday, June 18, 2003 6:57 AM Subject: Re: Apache: limiting the execution place No misunderstanding from you, but sort of one for me. Sorry about that. Still though, I can't quite see the reason for hindering other users to see

Re: Apache: limiting the execution place

2003-06-17 Thread exon
I don't quite see the point, or I've misunderstood what you're asking for. Do you want to block local users from seeing what global users can? What hinders the local users from getting it anyway through the webserver instead? /Andy On Mon, 16 Jun 2003, Chris Ess wrote: Comments below.

Re: Apache: limiting the execution place

2003-06-17 Thread Jonas Acres
I apologize if I misunderstood anything here... I believe the idea is to protect the Defender's raw PHP/Perl/whatever code from the Attacker, who also has an account on the server. If Defender's public_html directory is world-readable, Attacker can SSH/telnet/whatever in and take it. If

Re: Apache: limiting the execution place

2003-06-17 Thread Tim Greer
From: exon [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, June 17, 2003 2:16 AM Subject: Re: Apache: limiting the execution place I don't quite see the point, or I've misunderstood what you're asking for. Do you want to block local users from seeing what global users can? What

Apache: limiting the execution place

2003-06-16 Thread Nebi Gurbanov
Greetings, I want to know your opinions for the case below; I have severel users whose home directories lay in /home directory . Each user has a public_html directory in his/her home directory ,like ; /home/user_name/public_html Permissions of directories user_name and public_html must be at

Re: Apache: limiting the execution place

2003-06-16 Thread Boris Dragovic
I encourage people to try LinSec. It provides fs access domains which would definately solve the problem... thnx, lynx Comments below. Greetings, I want to know your opinions for the case below; --- Evaluating SSL

Re: Apache: limiting the execution place

2003-06-16 Thread Tim Greer
From: Nebi Gurbanov [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, June 16, 2003 6:39 AM Subject: Apache: limiting the execution place Greetings, I want to know your opinions for the case below; I have severel users whose home directories lay in /home directory . Each user has