[svlug] Giving admin. power to a web mgmt. interface

[Marc MERLIN]

On Fri, Nov 02, 2001 at 10:17:30AM -0800, Ivan Passos wrote:
> So, what can I do to overcome this obstacle (other than changing the
> permissions of every single app. the web server will call to be 4750 and
> owned by root:<group under which web server runs> -- now that's an _ugly_
> solution!! :)??

Write the  must be root part  in a small  perl script, make that  suid root,
make the  apache deamon part  or a special group,  and make the  perl script
root.thatgroup 2750

Of course,  that script could still  be run by  other CGIs, so make  sure it
doesn't do anything stupid :-)

Marc
-- 
Microsoft is to operating systems & security ....
                                      .... what McDonalds is to gourmet cooking
  
Home page: http://marc.merlins.org/   |   Finger marc_f at merlins.org for PGP key