Article View: ch.comp.os.linux
Article #21455Re: superuser Kommandi als nobody ausfuehren?!
From: Philippe Kehl
Date: Tue, 20 Jul 1999 00:00
Date: Tue, 20 Jul 1999 00:00
34 lines
2010 bytes
2010 bytes
Tach! On 15 Jul 1999, Marc SCHAEFER wrote: > Mike Thomi <mthomi@datanetworks.ch> wrote: > > cron job, der zB alle 12 std ein "repquata -avu > > > /<dein-htdocs-verzeichnis>/quota.txt macht > > das gleiche kannste auch mit spacechecks, etc machen. > > That's also the best idea in security point of view. Okay, but sometimes i need to _run_ a command. Perhaps i'd like to restart apache or to shutdown some services (inetd). But how about security? I have an ssl connection to the server. Perhaps that isn't too secure? But I think it will do for most things. Eg. a 'repquota' is none of other users business' but they cannot do bad things with it. I could do a second password check for the dangerous commands like 'apache stop'. Or I could deny that URL from everywhere but my dialup provider. Someone wrote about a 'wrapper'. Okay, i know what it is and what it does (like the in.telnetd, in.ftpd etc stuff). But how do i write one? I'm not good at c nor at perl and my shell scripts look terrible. So: Where can i find an example. Where do i 'log in'? Should the wrapper do a (2nd) password check? Or does the wrapper just check where i'm from or what i did or want to do? Hmm.. again a lot of questions.. :-) adios.. flip
Technical Details
Message-ID:
<Pine.LNX.4.04.9907201514001.2957-100000@akiv.ethz.ch>Path:
arc1-ca.pugleaf.net!unknown!not-for-mailReferences:
<Pine.LNX.4.04.9907141232430.15392-100000@akiv.ethz.ch> <378D9558.2957B207@datanetworks.ch> <7mkqi3$8jo$1@vulcan.alphanet.ch>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: f4b73,1f253977e4fff673 X-Google-Attributes: gidf4b73,public From: Philippe Kehl <flip@guv.ethz.ch> Subject: Re: superuser Kommandi als nobody ausfuehren?! Date: 1999/07/20 Message-ID: <Pine.LNX.4.04.9907201514001.2957-100000@akiv.ethz.ch> X-Deja-AN: 503122774 References: <Pine.LNX.4.04.9907141232430.15392-100000@akiv.ethz.ch> <378D9558.2957B207@datanetworks.ch> <7mkqi3$8jo$1@vulcan.alphanet.ch> To: Marc SCHAEFER <schaefer@alphanet.ch> X-Sender: flip@akiv.ethz.ch Content-Type: TEXT/PLAIN; charset=US-ASCII X-Trace: 20 Jul 1999 15:30:41 +0100, akiv.ethz.ch Organization: Swiss Federal Institute of Technology (ETHZ) MIME-Version: 1.0 Newsgroups: ch.comp.os.linux