Hi Anand,
Michael had built a privilege separation module for apache web-dav.
You can check it out below
http://oss.metaparadigm.com/apache-privsep/
From: Anand Vaidya <[EMAIL PROTECTED]>
Date: 16 August 2007 3:50:27 PM GMT+08:00
To: [email protected]
Subject: [Slugnet] Managing home dirs with a Web interface?
Reply-To: [EMAIL PROTECTED]
I am looking for some ideas on what is the best way to provide a
web interface
to end-users UNIX home-dirs. Details below:
- Few thousand users, access linux machines via shell and
manipulate files the
usual way (cp, rm, mkdir etc)
- Need to provide a web-interface to perform similar functions.
- Tomcat will runs as www-data:www-data user (low privileges)
Unfortunately, user files are owned by user:user and tomcat runs as
www-data:www-data so , tomcat/apache cannot read/write user dirs.
I am thinking of writing a C app running as root that will listen on a
localhost socket for "commands" from the web UI and just execute it
(after
necessary checks, dropping down privileges etc)
Are there any ways to manipulate autofs etc?
Are there any better ideas?
Regards
Anand
_______________________________________________
Slugnet mailing list
[email protected]
http://www.lugs.org.sg/mailman/listinfo/slugnet
