Re: [cobalt-users] Fw: RaQ4 ssh bug

["DenIT Internet Services [Thijs]" <thijs@xxxxxxxxx>]

Well, They need shell access for (for instance) MySQL, that plus some perl
scripts.
Not alot of clients have it, but still, the possibility of just reading
someone elses directory seems strange to me!

I think I should be able to make it a standard 703.

Regards,
Thijs


> Hi thijs,
>
> First of all do your customer really need shell access ???
> because the more you'll give the more they'll take !!
>
> If it's for chmod that they need it they should change FTP client,
> and apart from that I don't really see what they need it for
>
> le 26.9.2001 9:28, DenIT Internet Services [Thijs] à thijs@xxxxxxxxx a
> écrit :
>
> > Allright, this is the situation.
> >
> > I have a raq4 setup as host for web and ftp. Now when I grant my users
> > access to shell, they can just "walk"into any other www.domain.tld
directory
> > and reading (for instance) php files, also if someone installed
phpMyAdmin
> > they could simply get their username and pass for the mysqll database. I
> > tried changing this with CHMOD,
> > chmod 773 (or 771) on the web directory and that seems to solve the
problem
> > BUT my real question is why are these dir's made 775?? and where can I
> > change the default mod? (if I can at all?)
> >
> > Regards,
> >
> > Met vriendelijke groet,
> >
> > Thijs Boonstra,
> > Support Desk
> >
> > _______________________________________________
> > cobalt-users mailing list
> > cobalt-users@xxxxxxxxxxxxxxx
> > To Subscribe or Unsubscribe, please go to:
> > http://list.cobalt.com/mailman/listinfo/cobalt-users
>
> =======================================================================
>
> Marco Baurdoux
> Unix Administrator
> Infomaniak Network SA
> Avenue de la Praille 26
> 1227 Carouge
> Switzerland
> Tel: +41 (0)22 820 35 41
> Fax: +41 (0)22 820 35 46
> http://web.infomaniak.ch
>
> Linux/Unix is very user friendly,
> it's just very picky about who its friends are !!!
>
> =======================================================================
>
>
>
> _______________________________________________
> cobalt-users mailing list
> cobalt-users@xxxxxxxxxxxxxxx
> To Subscribe or Unsubscribe, please go to:
> http://list.cobalt.com/mailman/listinfo/cobalt-users
>