Re: [cobalt-users] Webalizer

[Brent Sims <brent@xxxxxxxxxxx>]

On Sat, 20 May 2000, RH Linux so wrote:

} this also happens with urchin


	Webalizer, any executable, will run under the owner/group
that it is executed under. The resulting pages will reflect that
ownership. Additionally this can be a security risk. If one of the
site's is compromised a knowledgable technopervert can use the page
to obtain access to more of the server upon which it sits.

	About the only thing you can do on a Cobalt without voiding
the warranty is to use the chgrp and the chown commands to make the
resulting pages reflect the owner/group of the site they are being
written to. You can do this with a shell script which is run via
cron or include them on the same script which causes the logs to be
written:

	/bin/chgrp <group> <file>
	/bin/chown <owner> <file>

	Peace be with you,
	
	Brent
	
	Brent Sims
	WebOkay Internet Services
	http://www.WebOkay.net
	Brent@xxxxxxxxxxx
	(719) 595-1427 (Voice/Fax)