Beefy Boxes and Bandwidth Generously Provided by pair Networks
Perl: the Markov chain saw
 
PerlMonks  

Re: suid me perl scripts and @INC (code)

by Masem (Monsignor)
on Aug 27, 2001 at 23:00 UTC ( [id://108227]=note: print w/replies, xml ) Need Help??


in reply to suid me perl scripts and @INC (code)

I believe you need to make sure that any directories that you want shared to be o+rx from that directory and up (Yes, this means you need to have your home dir +rx as well, which raises the big "this sucks" flag).

A better solution would be to create a new group under unix, adding yourself and your temp user to this group. Then, chgrp your home dir and perl dir (and sub dirs from there) to this new group, then g+rx those same dirs. Before you do that, I would also make sure to g-rwx all files in your home dir, and possibly move sensitive files to a different folder that is only u+rwx, so that only you can modify and view them incase the temporary user is hacked; all they'd be able to do would be able to see what files you have in ~, and what you have in the perl directory.

Alternatively, talk to your sysops about created a shared group directory outside of your home node, and that's even more secure. Again, you'd want to have a group to limit who sees it.

-----------------------------------------------------
Dr. Michael K. Neylon - mneylon-pm@masemware.com || "You've left the lens cap of your mind on again, Pinky" - The Brain
It's not what you know, but knowing how to find it if you don't know that's important

  • Comment on Re: suid me perl scripts and @INC (code)

Log In?
Username:
Password:

What's my password?
Create A New User
Domain Nodelet?
Node Status?
node history
Node Type: note [id://108227]
help
Chatterbox?
and the web crawler heard nothing...

How do I use this?Last hourOther CB clients
Other Users?
Others imbibing at the Monastery: (4)
As of 2024-04-16 16:40 GMT
Sections?
Information?
Find Nodes?
Leftovers?
    Voting Booth?

    No recent polls found