Robert Loomans wrote:
>
> On Fri, May 26, 2000 at 02:32:07PM +1000, Michael Lake wrote:
> > I am trying to get areound my caching prob with some temp
> > filename creation but get this apache warning:
> > sh: /home/mikel/public_html/tmp/graph.959315112.gif:
> > Permission denied
>
> You need to make the the directory world writable.... (ie, chmod o+rxw
> /home/mikel/public_html/tmp) This is a security hole, particularly if the
> machine has other users logging into it.
>
> You may want to look at cgiwrap or the suexec mechanism in recent versions
> of Apache so as to run the script as yourself, or some other sensible user.
Yes. I will have to look at a lot of security when the app
is finished. Fortunately its an internal application with
access limited by IP addr.
Andrew Macks suggested I look at the tmp dir permissions.
Thats what the prob was.
User nobody could overwrite a file but no create a new one.
I had:
drw-rw-rw- 2 mikel mikel 1024 May 26 15:31 tmp
I needed:
drw-rw-rwx 2 mikel mikel 1024 May 26 15:31 tmp
The exec bit must be on for others.
I remember now Ken Yap telling us about this bit at the
secure fest.
Mike
--------------------------------------------------------------------
Michael Lake
University of Technology, Sydney
Email: mailto:[EMAIL PROTECTED] Ph: 02 9514 1724 Fx: 02
9514 1628
URL: http://www.science.uts.edu.au/~mikel
Linux enthusiast, active caver and interested in anything
technical.
--------------------------------------------------------------------
--
SLUG - Sydney Linux Users Group Mailing List - http://www.slug.org.au
To unsubscribe send email to [EMAIL PROTECTED] with
unsubscribe in the text
