Re: [cobalt-users] Setting permissions

[jens@xxxxxxxxxxxxxxxxxxxx (Jens Kristian Søgaard)]

"Rodolfo J. Paiz \(E-mail\)" <rpaiz@xxxxxxxxxxxxxx> writes:

> Shell access is dangerous... no offense, but you sound like you're getting
> started from your tone (correct me if I misinterpret you). All of the
> quickest/easiest ways to hack into root start at a shell prompt (there are
> others, but you see my point).

You have to remember one important thing here, though. As soon as you
have given a user access to CGIs - he will also implicitly have a
shell account.

The same thing can happen with a PHP not running in safe-mode.

And btw, as far as I remember, it is possible for users to give
themselves the possibility of using CGIs - even if it's disabled in
the Control Panel.

-- 
Jens Kristian Søgaard, Mermaid Consulting I/S,
jens@xxxxxxxxxxxxxxxxxxxx,
http://www.mermaidconsulting.com/