RE: [cobalt-users] MAJOR BUG, Browse any directory view any file

["Erica Douglass" <erica@xxxxxxxxxx>]

> The code that allows you to view any file / directory within / below
home... [snip]

Here's an easy fix for this. I changed the permissions on /home/sites to
only allow everything for root. This way my hosted customers won't be
able to see the other sites on the server. Of course, the admin user
can't tab-complete them, but that's a minor inconvenience.

Here is what my permissions for /home/sites look like:
drwx--x--x    3 root     root         4096 May 24 07:21 sites

The command to change this permission is (while running as root):

cd /home
chmod 711 sites

Just run the above commands and you won't have that issue any more. This
is now standard operating procedure on all Cobalts I maintain. If you
let customers have shell access on your Cobalts, this is a MUST-HAVE!!

HTH,
Erica Douglass
Lead Web Developer
Simpli, Inc.