Re: [cobalt-users] Privacy?

["Marc Gear" <marcg@xxxxxxxxxxxxxx>]

> Now, when they telnet in, and goto /home/sites they can access ALL files
of
> any other domain hosted on the server,
> how do I prevent them from doing this?
> I respect the privacy of my customers and I DO NOT WANT OTHERS TO ACCESS
> THEIR FILES (sorry for the caps :P)

THERE IS NO WAY OF PREVENTING THIS
oh... sorry about the caps.

Telnet wont run chrooted. you'd have to have hard links to all the binaries
in a sort of copy of the / directory for that to work properly - and thats
an awful lot of customers quota for shit like that, and far far more hassle
than it is ever worth

It is really down to your customers to set the permissions for thier files
correctly if they do not wish to be viewable to the world.  They should bear
in mind that the web directory and the files in it have to be world
read-executable and world readable for them to work correctly as apache
reads them as the user 'nobody'

the moment you give your customers telnet access they should be responsible
for the permissions on thier files, not you.
--
/\/\ a R (