Re: Possible to reset Linux file permissions w/in webcat [shell] ?
This WebDNA talk-list message is from 2000
It keeps the original formatting.
numero = 35520
interpreted = N
texte = WebCat runs under Linux as a non-priveledged user, so there are lots of things that you cannot do directly using [SHELL]. It is, however, possible to use a SUID script to do the file permission/ownership changes. Have your sys admin create a script to chmod/chown the files, then flag it as SUID: chmod +s scriptnameI would recommend that the script should not accept any command line parameters; it is too dangerous. SUID script's run with the rights of the file's owner, not the user running the script. Hence you could have a script owned by root, that an unprivileged user could run.I have not written one yet (mostly because I AM the sysadmin), but the best design would be to have a directory structure parallel to the production files. So if your production files are in /home/http/htdocs/site1/...you should have a directory /home/youruser/htdocs/site/...and the script would copy the files to their real home, change the rights and ownership. I would recommend a script that simply copies all files from the current directory to the matching directory in the live system. Then you could move the script around to wherever you wanted to; there is no real reason to do this via WebCat at all.hope this gives you some ideas...John PeacockJohn Butler wrote: > > Linux , WC 3.08 > > Is it possible to reset file permissions within a webcat [shell] context? We are using > [shell] successfully for other things, but when my sys admin tried to make a template > which I can use to reset perms on other files without bothering him all the time, it > didn't work. Before I post code etc. I want to know if there is some reason why it > should *not* work in the first place (ie - security feature, etc). > > -John >------------------------------------------------------------- This message is sent to you because you are subscribed to the mailing list
. To unsubscribe, E-mail to: To switch to the DIGEST mode, E-mail to Web Archive of this list is at: http://search.smithmicro.com/
Associated Messages, from the most recent to the oldest:
WebCat runs under Linux as a non-priveledged user, so there are lots of things that you cannot do directly using [shell]. It is, however, possible to use a SUID script to do the file permission/ownership changes. Have your sys admin create a script to chmod/chown the files, then flag it as SUID: chmod +s scriptnameI would recommend that the script should not accept any command line parameters; it is too dangerous. SUID script's run with the rights of the file's owner, not the user running the script. Hence you could have a script owned by root, that an unprivileged user could run.I have not written one yet (mostly because I AM the sysadmin), but the best design would be to have a directory structure parallel to the production files. So if your production files are in /home/http/htdocs/site1/...you should have a directory /home/youruser/htdocs/site/...and the script would copy the files to their real home, change the rights and ownership. I would recommend a script that simply copies all files from the current directory to the matching directory in the live system. Then you could move the script around to wherever you wanted to; there is no real reason to do this via WebCat at all.hope this gives you some ideas...John PeacockJohn Butler wrote: > > Linux , WC 3.08 > > Is it possible to reset file permissions within a webcat [shell] context? We are using > [shell] successfully for other things, but when my sys admin tried to make a template > which I can use to reset perms on other files without bothering him all the time, it > didn't work. Before I post code etc. I want to know if there is some reason why it > should *not* work in the first place (ie - security feature, etc). > > -John >------------------------------------------------------------- This message is sent to you because you are subscribed to the mailing list . To unsubscribe, E-mail to: To switch to the DIGEST mode, E-mail to Web Archive of this list is at: http://search.smithmicro.com/
John Peacock
DOWNLOAD WEBDNA NOW!
Top Articles:
Talk List
The WebDNA community talk-list is the best place to get some help: several hundred extremely proficient programmers with an excellent knowledge of WebDNA and an excellent spirit will deliver all the tips and tricks you can imagine...
Related Readings:
[showif] and equality (1998)
[createfolder] & [deletefolder] (1997)
b12 cannot limit records returned and more. (1997)
Re[2]: Re[2]: WebCatalog on Linux (2000)
Req for code: upload and append to DB (2002)
.htaccess to make WebDNA serve HTML (2007)
Close-to Comparison Code (1998)
Database multiple selections (1998)
WebCat2_Mac RETURNs in .db (1997)
Extended [ConvertChars] (1997)
unsubscribe (2000)
3+ Levels of Navigation (2006)
Searching for (field1 OR field2) AND field3 (2000)
WebCat2b12 Mac.acgi--[searchstring] bug (1997)
New Featured Site (1999)
RE: 2nd WebCatalog2 Feature Request (1996)
Document contains no data... (1999)
flushdatabases (2000)
Multiple security dbs (1997)
RE: OK, here goes... (1997)